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Forget spreadsheets! 

You deserve better tools 
to manage your team! 


Meet Telerik TeamPulse - a new generation of highly visual project management tools that 
make it easier for you and your team to manage software development projects. TeamPulse 
allows your team to be more expressive in the way they capture requirements, manage 
project plans, assign and track work, and more importantly, be continually connected with 
each other. Without reams of flat, disconnected and complex spreadsheets TeamPulse 
supports your entire development lifecycle, from idea to release, by ensuring a constant flow 
of context, deep insight, and real-time collaboration. 


What you can do with TeamPulse: 

• Expressively decompose hierarchical requirements instead of flat lists 

• Collaborate around ideas, requirements, and schedules - not spreadsheets 

• Easily track project status with real-time visibility of features, tasks, and assignments 

• Support a seamless flow between ideas, requirements, scheduling and tracking 

• Continually analyze your project to ensure your team is following best practices 

• Support distributed teams by initiating and capturing contextual real-time collaboration 

with Microsoft Lync 2010 

• Ensure your developers never loose context by seamlessly synchronizing with 
Team Foundation Server 
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deliver more than expected 


Learn more at: 

www.telerik.com/team 
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Legacy Systems 
got you feeling a little isolated? 
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Managing strategic assets buiit with older technology can place you 

on the fringe of your company's IT landscape. 


Older systems and their valuable business logic can continue to contribute to your company's long-term 
success. Proven applications can be evolved to better fit in and enhance your organization's IT landscape 

eCube Systems offers a family of products and services that puts you front and center 
in your company’s plans. Contact eCube about: 

* Assessment Engagements 

Modernization and risk assessment to help you determine the way forward 

* Modernization Products 

Eclipse-based tools that simplify and standardize development, maintenance and integration 

* Integration Solutions 

Inter-operation between legacy and contemporary platforms and languages using .NET, Java and 
REST to expose proven legacy services 

* Legacy Transformations 

Low risk, high value phased conversion process that leverages transitional technology and quick 
Ui modernization to ensure stakeholder satisfaction 


Get back on the map with eCube Systems 



eCube Systems 

Enabling Enterprise Evolution 
Copyright eCube Systems LLC 
Montreal Boston - Houston 


Learn more: 
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866.493.4224 
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A centralized infrastructure for the build & test cycle that can handle the largest organizations 
and the most complex environments. Scale continuous integration across the enterprise to 
enable the transition to Agile software development. Support distributed development with 
remote agents and flexible role-based security. Create project score cards that include metrics, 
test results and static analysis to maintain visibility & quality across the development lifecycle. 
Call 216.858.9000 to schedule a demo or visit urbancode.com to learn more. 
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Handle complex multi-tier application deployments across the data center. Replace fragile 
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Enable self-service deployments for test environments while maintaining proper governance 
of controlled environments. Meet SLAs by rapid remediation with restarts, redeploy or rollback. 
Breeze through audits with reporting on changes to configurations across environments. 

Call 216.858.9000 to schedule a demo or visit urbancode.com to learn more. 
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LETTERS 

More on our failing 
math curricula 

I read with great interest Aleksey 
Nudelman’s essay on the state of 
math education in America. While 
K-12 math education could certainly 
be improved in many different ways, 
the biggest problem with math educa¬ 
tion in higher education is mission 
creep. Universities decide that math 
is so important that they even 
require calculus for business degrees. 
I know many engineers who have told 
me outright that they have never used 
calculus or really any math beyond 
algebra or trig in their career after col¬ 
lege even once! And businessmen? 
Forget it. 

It is simply not necessary for 
99% of real-world programming. I can 
out-program nearly any mathemati¬ 
cian I have ever met and it has noth¬ 
ing to do with math ability. It just hap¬ 
pens that businesses don’t need 
advanced math for most of the kind of 
programming they want, unless you 
consider statistics advanced math, 
which I do not. 

Over-emphasizing advanced math 
also has the effect of larding up the 
college degree with time-consuming, 
unnecessary courses, and it forces 
students to take classes that have little 
or nothing to do with their major 
when it could be adding more hours 
of real-world programming. I have 
not had one of my clients ask for 
advanced math functions for their 
databases. 

Imagine how long a programmer 
would last who purposely designed a 
database that did not fit the needs of his 
or her client. Yet we tolerate exactly 
that attitude from our colleges. 

Bill McNew 


What do you think? 

Letters to SD Times should include the 
writer's name, company affiliation and 
contact information. Letters become 
the property of BZ Media and may be 
edited. Send to feedback@bzmedia.com. 


FROM THE EDITORS 

Open source is just software 

I t’s certainly not new that open source software is big business. It’s been plain for 
more than a decade that open source is a gold rush—with the land free, and the 
gold available for the taking. Consider the huge initial public offerings of compa¬ 
nies like Red Hat (1999) and VA Linux (2001). If that didn’t get everyone’s atten¬ 
tion, then the huge investments in open source by companies like IBM and Sun 
Microsystems should have. 

But world of open source software has become more deliberate, more profes¬ 
sional in its approach. Once upon a time, talented developers created open source 
projects for the intellectual challenge, to prove a point, or because they happened 
to need the thing they were building. While some projects are indeed launched 
that way, today we see that the most high-profile projects are launched by compa¬ 
nies as part of a deliberate strategy to return value to shareholders. 

The newest demonstration of the new business-friendly face on open source soft¬ 
ware comes, of course, from Microsoft, which for years was Public Enemy #1 of the 
not just key projects like Linux, Mozilla and OpenOffice, but also against the whole 
notion of collaborative development and unfettered use and re-use of source code. 

But now, of course, Microsoft loves open-source software, and even offers its 
own project hosting site, CodePlex, and launched an organization, called the Out- 
ercurve Foundation, to bridge the worlds of open source and business software, 
“representing the interests of the growing audience of developers and corporations 
engaging with the traditional FOSS community.” 

The original anti-business open source movement is now intermingled with the 
business-friendly world of mainstream open source. It’s hard to tell where one 
starts and where one stops; certainly the kerfuffle between the Apache Software 
Foundation and Oracle over the Java Community Process shows that these worlds 
are totally intertwined. Interlocked. And, arguably, interdependent. 

If your organization still maintains the view that open-source software is code 
written by amateurs, well, it’s time to move on. In fact, it’s impossible to truly gen¬ 
eralize about open source software at all. It’s just software. And that’s the way it 
should be. I 


Welcome to the magazine 

D oes this issue of Software Development Times look different to you? Smaller 
in size, perhaps? Glossier in paper? Thicker, maybe? 

After ten years—260 issues, published twice per month—SD Times is no longer 
the industry newspaper for software development managers. It’s the industry 
magazine for software development managers. 

Many of you follow developer news on our SDTimes.com website, News on 
Monday e-newsletter, RSS feeds, Twitter, Facebook, and even our iPhone and iPad 
apps. By the time the newspaper came out, many of you read SD Times primarily 
for the more analytical articles and the columns. 

In response, we are expanding our news reporting online; for example, we 
added a section to the website called “Newswire.” SD Times will become a more 
analytical publication, brought to you monthly in a magazine-size format. 

In this, the first monthly issue of SD Times, we’ve generally maintained the 
same user experience as in the newspaper—but there are more articles, taking an 
in-depth, bigger-picture view of the software development industry. Plus, we have 
a few brand-new sections, such as the “Analyst Watch” column (see page 77). 

We hope you enjoy what we internally refer to as “SD Times 2.0.” And happy 
New Year. I 
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Oracle: The door is open for 

The feud over the handling of the TCK license and its 


BY ALEX HANDY 

Oracle has not ruled out a return of the 
Apache Software Foundation to the 
Java Community Process after the 
open-source organization gave up its 
seat on the JCP Executive Committee 
in protest over what it calls unfair 
licensing practices around the Test 
Compatibility Kit. 

Apache’s move comes after years of 
infighting with Sun Microsystems. That 
fight has continued with Oracle in place 
of Sun, and it centers over what Apache 
considers to be a breach of promise and 
license. 

The battle began over the Test Com¬ 
patibility Kit for Java SE 5, and has 
since remained simmering. Apache 
claims that the license used for Java SE 
7s TCK removes the freedoms of the 
Java implementers. Specifically, the 
TCK license only grants the imple- 
menter license to use their Java in desk¬ 
tops, servers and mobile devices. The 
license explicitly leaves out embedded 
systems and appliances, an omission the 
Apache Foundation considers danger¬ 
ous to any entity that would implement 
the JCPs standards. 

The ASF, which served on the JCP 
Executive Committee for 10 years, 
issued a statement on Dec. 9, 2010, 
about the resignation. In it, the non¬ 
profit stated that the JCP Executive 
Committee failed at its only chance to 
fix the limitations of the Java SE 7 TCK. 

“The members of the EC refused to 
stand up for the rights of implementers, 
and by accepting Oracles TCK license 
terms for Java SE 7, they let the integri¬ 
ty of the JCPs licensing structure be 
broken,” read the statement. 

The statement went on to say that 
the ASF does not feel that the JCP is a 
valid standards organization. 

“The Apache Software Foundation 
concludes that that JCP is not an open 
specification process—that Java specifi¬ 
cations are proprietary technology that 
must be licensed directly from the spec 


lead under whatever terms the spec 
lead chooses; that the commercial con¬ 
cerns of a single entity, Oracle, will con¬ 
tinue to seriously interfere with and 
bias the transparent governance of the 
ecosystem; that it is impossible to dis¬ 
tribute independent implementations 
of JSRs under open-source licenses 
such that users are protected from IP 
litigation by expert group members or 
the spec lead; and finally, the EC is 
unwilling or unable to assert the basic 
power of their role in the JCP gover¬ 
nance process.” 

Adam Messinger, vice president of 
development at Oracle, issued a state¬ 
ment the following day, in which he 


BY DAVID RUBINSTEIN 

If Silverlight 4 is where the technology 
hit the mainstream, then the announce¬ 
ment of Silverlight 5 is the arrival point, 
according to Patrick Hynds, an expert 
in Microsoft technologies. 



Microsoft's Scott Guthrie says Silverlight's 
portfolio is built around the user experience. 


asks the Apache Foundation to recon¬ 
sider its decision. 

“Apache voted against initiating tech¬ 
nical committee work on both SE 7 and 
SE 8, effectively voting against moving 
Java forward,” he said. “Oracle has a 
responsibility to move Java forward and 
to maintain the uniformity of the Java 
standard for the millions of Java devel¬ 
opers, and the majority of Executive 
Committee members agree. We encour¬ 
age Apache to reconsider its position 
and remain a part of the process to move 
Java forward. ASF and many open- 
source projects within it are an impor¬ 
tant part of the overall Java ecosystem.” 

Rod Johnson, director of the 


Enhanced media experiences and 
development capabilities are among 
the highlights in the Silverlight 5 rich 
application platform, announced Dec. 1 
at Microsoft’s Silverlight Firestarter 
developer event in Redmond. 

“I was cautious of Silverlight the first 
couple of rounds,” said Hynds, a 
Microsoft Regional Director, so desig¬ 
nated because of his depth of expertise 
in the technology. “But now I believe 
it’s very useful, and that’s what decides 
if it proliferates or dies.” 

The latest version of Microsoft’s 
rich application development and 
deployment platform will go into beta 
the first half of 2011 and will be read¬ 
ied for general release later in the 
year. Acknowledging there has “been 
a lot of angst” on the topic of the 
future of Silverlight, Scott Guthrie, 
Microsoft’s corporate vice president, 
said in his event keynote, “Let me say 
up front that there is a Silverlight 
future, and we think it’s going to be a 
very bright one.” 


Silverlight 5: The technology’s 

Microsoft unveils advanced developer and media 
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Apache to return 

omission led to departure from JCP 


SpringSource business unit of VMware 
and a member of the JCP Executive 
Committee, said that the EC decided 
to move Java forward while ignoring 
the TCK issue because it was believed 
that Java needed to move forward 
before anything else could be 
addressed. 

“I think that this vote around the 
Java SE 7 and SE 8 plan was difficult 
for us,” he said. “We chose to vote on 
the technical merits, and we felt we 
didn’t want to let an organizational dis¬ 
pute get in the way of something that 
makes actual sense. 

“This has to be a wakeup call...The 
fact is that, I think, over time most of 


the members of the JCP have support¬ 
ed the Apache position on this, includ¬ 
ing Oracle.” 

Johnson also said that Apache’s 
departure from the Executive Commit¬ 
tee is not a catastrophe. “I don’t think it 
really changes anything. If you look at 
Apache projects, some of the most 
important Java programs are at Apache. 
The most popular production deploy¬ 
ment platforms for Java Web Applica¬ 
tions is Apache Tomcat, and Apache 
does a lot of stuff with Java.” 

Johnson added that he would like to 
see the TCK offered under the GPL, 
like the OpenJDK itself. “We would 
love to see the TCK published under 



SpringSource's Rod Johnson does not see 
Apache's departure as catastrophic. 


similar conditions. Honestly, I think if 
you look at what’s happening in the Java 
community and look at the continued 
health and proliferation of Java open- 
source projects, I think one community 
dispute shouldn’t color that community 
as a whole.” I 


arrival point 

capabilities 

Much of that angst was generated 
by comments Bob Muglia, Microsoft’s 
Server and Tools Division president, 
made at the Professional Developers 
Conference regarding HTML5, when 
he indicated that World Wide Web 
Consortium standard would be the 
cross-platform choice for rich applica¬ 
tion delivery. In December, Guthrie 
said that “there are a lot of devices out 
there, and users demand and expect 
the richest experiences on them. 
There is not going to be one technolo¬ 
gy that’s going to be used to do all of 
it. Our goal is to provide a technology 
portfolio that enables developers to 
build the best possible user experi¬ 
ences.” 

Guthrie said Microsoft is investing 
heavily in HTML5, adding that “We 
want to have the best browser out 
there that supports it.” Regarding 
adding Silverlight and WPF to the mix, 
he said, “These are all great technolo¬ 
gies. Each one has its own strengths 
and weaknesses. But we think ulti¬ 


mately the flexibility of having each of 
these choices is a real strength of our 
developer platform and our overall 
tools offering.” 

Hynds agreed, saying, “The tools 
will dictate how useful any of this stuff 
is.” He called HTML5 “an augment¬ 
ing technology,” while Silverlight “is 
the next innovation of the .NET 
Framework.” 

As for Silverlight 5, Guthrie said a 
key new feature is the addition of 
hardware video decode support. 
“What this means now is instead of 
using your CPU to decode video, you 
can actually offload it to the GPU of a 
system,” he explained. “You can now 
stream 1080p HD video live and on- 
demand on a netbook...and your CPU 
and battery power are even better as 
well.” 

He also discussed Trickplay, a tech¬ 
nology for variable-speed playback of 
audio and video. It includes pitch cor¬ 
rection for when a video is sped up. 
“Instead of the trainer sounding like a 
chipmunk, they’ll actually sound nor¬ 
mal,” he said. 

On the application development 
side, Guthrie highlighted data-binding 
debugging and Model View ViewModel 
capabilities. “We’re covering a lot of the 


WPF and Silverlight data-binding fea¬ 
tures,” he said. 

As for MWM, Guthrie said 
Microsoft is adding markup extension 
support, so “you can cleanly author an 
MWM-based solution and do it in the 
same way you do for both Silverlight 
and WPF.” 

Silverlight 5 also has new automat¬ 
ed UI testing support with Visual Stu¬ 
dio 2010, including improved profil¬ 
ing support to locate application 
performance hotspots. It also supports 
WCF RIA Services, including WS- 
Trust for message security, the compa¬ 
ny said. 

Guthrie said another area of focus in 
Silverlight 5 is the out-of-browser expe¬ 
rience, specifically the addition of sup¬ 
port for multiple windows. He 
explained how users can create child 
windows that can be managed as part of 
the out-of-browser experience. 

The new release also includes a fea¬ 
ture called P/Invoke, which enables 
users to call unmanaged DLLs and 
Win32 APIs, which Guthrie said “opens 
device possibilities and integration with 
the operating system.” 

Guthrie said the first public beta will 
ship in Spring 2011, with the final release 
coming before the end of the year. I 
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A bad season for Linux 

Novell and Red Hat's actions are trouble for community 


BY ALEX HANDY 

Last fall saw both Novell and Red Hat 
taking actions that could potentially 
harm Linux as a whole. First, Red Hat 
settled out of court 
with patent troll Acacia 
Research, causing con¬ 
cern within the Linux community that 
Acacia Research would be encouraged 
to litigate further. Then Novell 
announced plans to sell its patent port¬ 
folio to a coalition of companies aligned 
with Microsoft. Roth moves could spell 
patent problems for Linux in the future. 

The Novell deal sends 882 of its 
patents to CPTN Holdings in exchange 
for US$450 million. Microsoft 
expressed pleasure at bringing Novell 
technology in-house, but declined to 
comment further on its intentions for 
them. 

Meanwhile, in October, Red Hat was 
back in US District Court, Eastern Dis- 



The Open Source Initiative's Bruce Perens 
blames the U.S. patent system. 


trict of Texas with Acacia Research over 
litigation relating to Acacias patents on 
systems and methods for exchanging 
data and commands between an object- 
oriented system and a relational system. 


While such patents could be used to take 
down almost every database-backed 
applications ever created, Red Hat 
decided to settle with Acacia for an 
undisclosed sum. 

Together, these developments com¬ 
bine to form potential patent dangers 
for Linux in the future. Bruce Perens, 
cofounder of the Open Source Initia¬ 
tive and the Linux Standard Base, said 
that the primary problem with both of 
these events is fundamentally the same: 
The American patent system is broken 
when it comes to software patents, with 
the USPTO making things worse. 

“I think, actually, they just got rid of 
a whole bunch of blocks to patents, 
which is going to put more cases in 
court,” he said. “They just eliminated 
three objections around prior art, and 
they mainly did it so examiners can 
grant patents faster. I think the problem 
continued on page 31 ► 
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W3C > mobile development 'best practices’ 


BY KATIE SERIGNESE 

Understanding a mobile device’s limita¬ 
tions and optimization of response time 
were two of the key recommendations 
the World Wide Web Consortium made 
in its “Mobile Web Application Best 
Practices” report. 

In development since 2008 and pub¬ 
lished in December 2010, this set of best 
practices specifically addressed mobile 
Web application development, “because 
[mobile development] is not really the 
future anymore; its today,” said Frangois 
Daoust, mobile Web specialist at W3C. 

The document is designed to 
advise those just getting into mobile 
development, he added. But the 
guidelines are not targeted solely at 
developers, the W3C said; interaction 


SPARE THE NETWORK 

Use appropriate Web protocol features to 
reduce network bottlenecks and latency. 

• Cache AJAX data 

• Minimize external resources, 
applications and data size 

• Use cookies sparingly 

• Optimize network requests 

SET USERS FREE 

Mobile devices are used in various con¬ 
texts, from killing time at home to urgent 
requests on the go. Let users know and 
control what happens to earn their trust. 

• Ensure the user is informed about use 
of personal and device information 

• Offer users a choice of interfaces 

• Don't change focus when dynamically 
updating page sections 

REMEMBER WEB PRINCIPLES 

Mobile devices are just one way to access 
the Web. Generic Web principles also 
apply to the development of robust 
mobile Web applications. 

• Replicate local data 

• Ensure consistency of state between 
devices 

• Don't execute unescaped or untrusted 
JSON data 

DESIGN FOR FLEXIBILITY 

Web applications are run in evolving and 


and graphic designers, site adminis¬ 
trators, and tool developers are also 
encouraged to read it. 

To Daoust, the most important points 
are understanding the data constraints of 
mobile devices and reducing the use of 
the network, because data is not always 
free, he said. “Mobile Web developers 
have to assume the user is accessing data 
on the go’ and may not always be con¬ 
nected to a wi-fi connection... On a wi-fi 
connection, the data transfer is a lot 
faster, but it may not always be available 
or may cost an additional fee to connect 
to in a public place... There is, eventual¬ 
ly, a Teal’ cost because mobile users do 
not all have flat rates, and costs can be 
around US$1 per 100KB.” 

Increased caching can reduce 


heterogeneous environments. Flexibility 
allows you to address more devices and 
users to reduce costs. 

• Design for multiple interaction methods 

• Ensure text flows 

• Support a non-JavaScript variant if 
appropriate 

• Prefer server-side detection where 
possible; use client-side detection 
when necessary 

EXPLOIT MOBILE-SPECIFIC FEATURES 

Some Web technologies are particularly 
relevant to mobile devices. Learn to use 
them. 

• Make telephone numbers "click-to-call" 

• Consider mobile-specific technologies 
for initiating Web applications 

• Use appropriate client-side storage 
technologies for local data 

OPTIMIZE RESPONSE TIME 

Every detail matters in mobile Web appli¬ 
cations, and some technical points may 
significantly boost the overall user expe¬ 
rience. 

• Aggregate static images into a single 
composite resource 

• Minimize perceived latency 

• Optimize for application start-up time 

• Keep Document Object Model size 
reasonable 

Source: The World Wide Web Consortium 


reliance on the network, he said, which 
can be done by fingerprinting resource 
references and caching AJAX data. 
According to the W3C, “a resource that 
is embedded within an application (an 
avatar, a style sheet, a script) that may 
change from time to time can still be 
flagged with a version number.” 

Additionally, “Web applications 
exchange data on a dynamic basis, but 
this does not necessarily mean that the 
data itself is dynamic. Caching direc¬ 
tives may be set for AJAX data, which is 
a quality that is often overlooked,” the 
W3C said. 

Make the user feel comfortable, too 

Developed with the Mobile Web Best 
Practices Working Group (which 
includes AT&T, Deutsche Telekom, 
Google, Nokia and Opera Software), the 
best practices also address the impor¬ 
tance of exploiting a mobile devices 
capabilities to enhance the user experi¬ 
ence, while understanding that not all 
devices have the same capabilities. 

“This means a developer should take 
advantage of touch-based screens, but 
still design for other forms of interac¬ 
tion,” Daoust said. 

Additionally, the W3C advises devel¬ 
opers to not only respect a device’s data 
constraints, but also its physical con¬ 
straints (such as screen size). According 
to the W3C, limiting scrolling to one 
direction or excluding images a device 
cannot render are some examples of this. 

Other suggestions included that all 
information conveyed in color should also 
be available without color, as well as to 
not rely on embedded objects or scripts. 

“The normal way of developing Web 
applications is adding a lot of JavaScript 
code, but developers often forget or 
don’t try to understand what it is they 
are doing and often do too many opera¬ 
tions in the application’s structure,” 
Daoust explained. 

And this is the real unfriendly way of 
developing mobile Web applications, he 
added. It’s overlooking optimization and 
a device’s restrictions at the expense of 
cost and battery power. I 


Steps for ideal Web application development 




You program in Java, 
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Object-oriented 
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Outlook for dynamic languages: Not so good 

Ruby has a strong grip in the market, but others are withering on the vine 


BY ALEX HANDY 

According to the technology hype cycle, 
dynamic languages should be in the 
trough of disillusionment by now. For 
the past three years, businesses have 
awakened to PHP, Python and Ruby as 
viable tools on the Web and in the server, 
and after extensive growth for all manner 
of non-Java, non-C languages, many 
businesses are looking to see if those 
promises have been fulfilled. 

Mike Gualtieri, principal analyst at 
Forrester, said that those promises have 
not been fulfilled. He said he used to 
receive numerous phone calls asking 
about PHP, Python and Ruby from 
enterprises. Rut he said that those ques¬ 
tions have been replaced by ones about 
mobile development and JavaScript. 

“I think its been proven to be false 
that you can build applications quicker 
with Ruby on Rails,” he said. “The typ¬ 
ical Ruby demo was, ‘Look, I can put 
my data in and it creates the forms and 
the database for me, and I can update it 
and it changes that.’ The problem is it’s 
like the 1980s all over again. It breaks 
down when you start trying to do a real 
application.” 

Making the case for Ruby 

Tom Mornini, CTO of Engine Yard, isn’t 
so sure that this is the case, however. He 
admits that enterprises are not replacing 
core Java applications with Ruby ver¬ 
sions, but he also said that Ruby on Rails 
remains a popular enterprise choice for 
smaller Web applications, like marketing 
sites and social engagement applications. 

“Gartner says [Ruby] is being used 
considerably, but not for core compe¬ 
tency applications,” said Mornini. 
“We’re starting to get uptake in training 
from large enterprises. The No. 1 thing 
our customers ask us about is, ‘Do you 
know any Ruby developers?’ The 
demand is off the charts. They’re com¬ 
manding very high rates of pay. Engine 
Yard is growing at multi-digit percent¬ 
ages a month. Java collapsing probably 


isn’t hurting either,” he said, referring 
to the current kerfuffle within the JCR 
Mornini said Ruby on Rails is impor¬ 
tant for software development as a 
whole, and that this is why it remains an 
appealing platform. “David Heinemeier 
Hansson’s [the creator of Rails] philoso¬ 
phy of convention over configuration and 



not replacing Java in large enterprises. 

simplification for Rails is going to pay 
back for generations,” he said. 

“Even when Rails is the old, crusty 
Java of the future, people will look back 
and edit the Rails code and say, ‘Thank 
God this isn’t done another way.’ I 
believe David, in creating Rails, is 
essentially the Henry Ford of software 
development. It used to be that applica¬ 
tion was a custom coach, hand-crafted 
by the finest individuals. Rails is more 
of an assembly line approach.” 

As others struggle... 

This seems not to be the case for some 
other dynamic languages, according to 
Gualtieri. He said that JavaScript is and 
will likely remain a key dynamic language 
for all developers, but others like Perl, 
PHP and Python are dwindling in their 
broader enterprise appeal. Specifically, 
he said he tends to hear questions from 
customers about the content manage¬ 
ment platforms rather than about the 
languages in which they are written. 


One example is in the increased inter¬ 
est Gualtieri has seen in Drupal, the 
open-source content-management sys¬ 
tem. Drupal is written in PHP, but he 
said the only questions he gets from 
enterprises about PHP are Drupal-relat- 
ed. And while he said that calls about 
Ruby have decreased as well, the recent 
acquisition of Ruby hosting company 
Heroku by Salesforce.com seems to indi¬ 
cate that Ruby is still a hot property. 

Intel, Salesforce and VMwareseem 
to think Ruby has staying power. Sales¬ 
force purchased Heroku for over 
US$200 million in December, and 
anonymous sources said that VMware 
put in a 9-digit bid for Engine Yard, 
which, according to these sources, 
turned it down. Intel, on the other 
hand, has invested millions in Ruby 
and cloud hosting firm Joyent. 

With these companies taking inter¬ 
est in Ruby on Rails, it would seem the 
language and Web framework are guar¬ 
anteed financial backing for years to 
come. Contrast this to Python, a lan¬ 
guage that is largely without a major 
corporate backer, or PHP, for which 
Zend is the sole enterprise gatekeeper. 

Adam Blum, CEO and founder of 
Rhomobile, said that Ruby still has 
momentum. His company builds 
frameworks for mobile applications that 
allow developers to use Web develop¬ 
ment skills to build native phone pro¬ 
grams. Rhomobile’s frameworks are 
built in Ruby because, he said, Ruby is 
where the action is. 

He said that Rhomobile frameworks 
follow the Model View Controller sepa¬ 
ration of duties. “We had to do the con¬ 
troller in something. If we did it in Java, 
the .NET guys wouldn’t like it. If we did 
it in .NET, the Java guys wouldn’t like it. 
Ruby is a nice Switzerland,” he said. 

“Enterprises we deal with say it’s a fun 
opportunity for them to learn a more 
productive language. The momentum of 
Ruby is enormous. There are no unem¬ 
ployed competent Ruby developers.” I 
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Google donates 
Instantiations 
code to Eclipse 

BY ALEX HANDY 

Google announced in December that it 
has donated the source code and IP 
rights to two of the Instantiations tools 
it acquired in August. Google had 
already made the Instantiations prod¬ 
uct line available for free, and todays 
move sends the code behind those tools 
to live on as new projects at the Eclipse 
Foundation. 

Google is donating both CodePro 
Profiler and WindowBuilder. This 
includes the WindowBuilder Engine 
and designers for Swing and SWT, mak¬ 
ing for an entire GUI design tool chain 
within the Eclipse platform. 

Mike Milinkovich, director of the 
Eclipse Foundation, said that “this is 
clearly a significant new project 


announcement, and very good news for 
Java developers using Eclipse. It has 
been impressive to see the continued 
growth and popularity of Window¬ 
Builder, as this product has always filled 
a much-needed gap in the Eclipse 
offerings. We look forward to it appear¬ 
ing in an Eclipse release soon. We’re 
very pleased with Googles generous 
support of Eclipse, and the Java devel¬ 
oper community around the world.” 

Genuitec, the company behind the 
MyEclipse distribution, will begin offer¬ 
ing support for WindowBuilder in 2011, 
and will support GWT, Swing and SWT. 

CodePro Profiler, on the other hand, 
is an Eclipse-based Java application 
profiling tool that helps developers 
identify performance issues early in the 
development cycle and find CPU and 
algorithmic bottlenecks, memory leaks, 
threading issues, and other concurren¬ 
cy-related problems that can slow down 
an application. 

Developers looking for commercial 
support for CodePro Profiler will be 
able to sign up with Eclipse consulting 
firm OnPositive. I 


Android education 
in the Bay Area 

First-ever Android Developer 
Conference debuts March 2011 

BY ALAN ZEICHICK 

Android, the open-source operating sys¬ 
tem for mobile devices, is the focus of 
AnDevCon, a technical conference 
coming to the San Francisco Bay Area in 
early March 2011. The conference is for 
enterprise and commercial software 
developers, as well as entrepreneurs and 
IT professionals. Information about 
AnDevCon is at www.andevcon.com. 

AnDevCon, owned and produced 
by BZ Media LLC (publishers of SD 
Times), will take place in San Mateo 
from Mar. 7-9. The conference offers 
more than 60 full-day and half-day 
workshops and technical classes; there 
will also be a keynote address from 
Christy Wyatt, vice president of Soft¬ 
ware and Services Product Manage¬ 
ment at Motorola Mobility. I 
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Social-network open source project, 
Diaspora, named 'rookie of the year’ 


BY KATIE SERIGNESE 

Was social networking a hot trend in 
2010? Yes, and not only because of the 
success of Facebook and Twitter. It 
even affected open-source develop¬ 
ment, and as evidence of this, open- 
source project Diaspora topped Black 
Ducks third annual “Rookies of the 
Year” list. 

Black Duck, a company that sells 
management tools for open source 
projects, launched its awards to high¬ 
light the the most “buzz-worthy” open- 
source projects started in the past year. 
According to the company, there is no 
connection between the projects con¬ 
sidered for the list and their use, or 
potential use, of Black Ducks services. 

After evaluating project popularity 
based on the number of developers 
involved, project activity (such as the 
number of times code is committed to a 
project), and the number of websites 


linked to a project, Diaspora was the 
clear No. 1 project, said Philip Mar¬ 
shall, senior product marketing manag¬ 
er at Black Duck. 

The Diaspora project, started by 
four New York University students, is 
hosted at joindiaspora.com, and cur¬ 
rently describes itself as being in a pub¬ 
lic alpha. The project hopes to create 
decentralized social networks in which 
content contributors—not a large com¬ 
pany like Facebook—retain full control 
over their information. 

Regardless of the goals of the proejct, 
“With over 900 in-bound links, it was a 
clear indication this project had a lot of 
buzz,” said Black Ducks Marshall. “And 
quite frankly, no matter how we cut the 
data.. .Diaspora came out glowing each 
and every time.” 

A social network project topping the 
list is not surprising, just affirmative that 
social networking and collaboration are 


continuing trends, said Peter Vescuso, 
executive vice president at Black Duck. 

Cloud Movement 

Aside from recognizing up-and-coming 
projects, which is mainly done for fun, 
the company’s list also showed contin¬ 
ued cloud-based development and 
movement into enterprises by open- 
source software. 

Thirty percent of the new projects, 
including OpenStack, OpenStack Nova 
and ownCloud, are cloud-related and use 
the Affero General Public License, Mar¬ 
shall said, which is based on the Free 
Software Foundations GPLv3. 

The AGPL license ensures that if a 
project is hosted, any enhancement 
made to it is given back to the network 
community, Vescuso explained. “The 
AGPL license has been around a long 
time and is growing in popularity, but 
continued on page 26 ► 
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The Rookies of the Year for 2010 


Diaspora is No. 1 
Black Duck 'rookie' 

◄ continued from page 24 

we’re surprised to see it jump up to be 
used in 30% of the top 10. And I think its 
indicative to the growth of the cloud.” 

Additionally, rookies Activiti BPM 
Platform and VoltDB are heavy business 
and data applications, which shows an 
uptick in the use of open-source soft¬ 
ware for the enterprise, Marshall said. 
“This indicates that open source has 
clearly moved into the enterprise space.” 

Although not a focus of the analysis, 
data also revealed a shift toward the 
GitHub source-code hosting service and 
away from the SourceForge repository. 
Sixty-nine of the top 200 new projects 
used GitHub, while 14 used Source- 
Forge, according to Black Duck. 

For its 2010 rookies list, Marshall 
estimated that the company chose 
from approximately 40,000 new proj¬ 
ects, up from 19,000 in 2009 and 
17,000 in 2008. I 


1. Diaspora: A privacy-sensitive, personally 
controlled, open-source social network 

2. OpenStack: Open-source cloud com¬ 
puting software for building cloud infra¬ 
structures 

3. Cloud9IDE: An integrated development 
environment aimed at using features from 
other existing IDEs and source code edi¬ 
tors like Eclipse, NetBeans and TextMate, 
bundled as plugins 

4. OpenStack Nova: A cloud-computing 
fabric controller (the main, middleware 
part of an laaS system) written in Python 

5. NuGet: A free, open-source, developer- 
focused package management system for 
the .NET platform for simplifying the incor¬ 
poration of third-party libraries into a .NET 
application during development 

6. Activiti BPM Platform: A business 
process management and workflow sys¬ 
tem targeted at businesspeople, develop¬ 
ers and system admins. Its core is a BPMN2 
process engine for Java and can run in a 
Java application, on a server, on a cluster 
or in the cloud 

7. SparkleShare A file-sharing and collab¬ 
oration tool that allows for instant syncing 


with any Git repository. Though Sparkle- 
Share is not made to be a graphical front 
end for Git or a backup tool, it may be use¬ 
ful for other kinds of purposes, like backing 
up small files or monitoring projects 

8. VoltDB: A fast, scalable, open-source 
online transaction processing ACID data¬ 
base. It is an alternative to NoSQL key-val¬ 
ue stores and database sharing 

9. RapidFTR: A mobile application that 
lets aid workers collect, sort and share 
information about children in emergency 
situations. It allows for guick input of 
essential data about a child on a mobile 
phone, including a photograph, the child's 
age, family, health status and location 
information. Data is saved automatically 
and uploaded to a central database when¬ 
ever network access becomes available. 
Registered aid workers will be able to cre¬ 
ate and modify entries for children in their 
care as well as search existing records 

10. ownCloud An open, personal cloud 
that runs on personal servers. It enables 
accessing and sharing data from cus¬ 
tomers' own devices 

Source: Black Duck Software 
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Linux sees a bad season in fall 


Salesforce.com 
plans database 
as a service 

BY ALEX HANDY 

Salesforce.com s CEO Marc Benioff has 
announced a new platform launching 
last year, named Database.com, that will 
offer developers a scalable, multi-tenant 
database for use with any type of pro¬ 
gramming language. 

Database.com will make use of exist¬ 
ing internal Salesforce software that runs 
the databases behind its sites. The serv¬ 
ice will be free for users with fewer than 
50,000 transactions a month and fewer 
than 100,000 records stored. For US$10 
per month, developers will be able to 
add 100,000 records, or 150,000 transac¬ 
tions. 

Enterprises will have additional 
access to search, security and authenti¬ 
cation services at a rate of $10 per user 
per month. 

Eric Stahl, senior director of product 
marketing at Salesforce, said that the 
Database.com service will also be 
focused on mobile developers. “We’re 
talking about next-generation social and 
mobile applications, too. The real mag¬ 
ic happens deep down in the database,” 
he said. 

“We’re looking at the use case 
where these applications are mobile 
and developers want to write the appli¬ 
cations natively on an iPhone or 
Android or BlackBerry. Those applica¬ 
tions need to be able to call a database 
over the Internet in a secure way. 
We’ve been looking at how we can 
make that possible.” 

To that end, the Salesforce team is 
aiming for a completely hands-off data¬ 
base administration system. Scaling up 
of data and caching commonly used 
information will happen automatically 
within Database.com. Developers will 
not have to worry about optimizing their 
databases, either, as the service will also 
take care of this automatically. 

Database.com will be available for 
use with both a REST and SOAP API. I 


◄ continued from page 17 

has just gotten bigger. 

“We in the open-source community 
have looked at the situation politically 
and said, ‘We can’t do anything about 
this because the pharmaceutical com¬ 
panies are running the show.’ We can’t 
do that anymore. We are going to be in 
trouble. Microsoft is escalating a patent 
war against us.” 

Microsoft's targets 

Perens fears that the lack of transparency 
in both the Novell deal and the Red Hat 
case could lead to uncertainty for Linux 
users. But no matter what Microsoft got 
from Novell’s patents, he said that the 
SCO case will not return. That case was 
about copyright, and Microsoft’s allies 
have purchased patents only, he said. 

Perens added that the purchase of 
these patents by Microsoft’s allies was 
specifically designed to target the Open 
Invention Network (OIN), a company 
built to extend patent protections to Linux 
and other open-source project users. 
OIN’s CEO Keith Bergelt described it as 
“a defensive patent management organi¬ 
zation with an explicit purpose of protect¬ 
ing and supporting the Linux community.” 

Perens said that “the companies that 
have partnered with Microsoft are com¬ 
panies that potentially want to bring law¬ 
suits, and they wanted to weaken the 
capability of the OIN to defend Linux by 
suing them.” 

But Bergelt said that the licenses OIN 
sells will still include the Novell patents, 
even if those patents change hands, due 
to preexisting agreements and the word¬ 
ing of the OIN license. He also said that 
he did not see the Microsoft purchase as 
a move against OIN. 

“I would hope there’s some responsi¬ 
bility there, that they’d use the patents 
primarily to protect themselves and their 
fellow consortium members. For us, 
those licenses don’t terminate based on a 
change in ownership of the patents,” said 
Bergelt. 

As a patent licenser, OIN is able to sell 
access to a portfolio of over 300 patents, 
provided the licensees promise not to liti¬ 


gate over any Linux-based patent viola¬ 
tions. Some of those patents belonged to 
Novell and will be transferred to CPTN. 

Bergelt also said that Microsoft had 
used some of its own patents to sell inter¬ 
operability licenses to Novell customers 
under the pretense that Linux somehow 
violated these patents. He said that 
Microsoft would use these patents as the 
icing on its existing patent litigation cakes. 

When Microsoft was negotiating with 
companies it claimed had infringed upon 
its patents, said Bergelt, its lawyers would 
push legally until an impasse was reached, 
then bring in the supposed Linux patents 
and allege further violations because the 
defendant was using Linux. OIN com¬ 
plained about these actions, and Microsoft 
has stopped using since May 2010, he 
said. Microsoft would not comment, citing 
the ongoing litigation. 

Meanwhile, Mike Milinkovich, execu¬ 
tive director of the Eclipse Foundation, 
agreed that software patents have to go, 
but he also had a more subdued view of 
the Red Hat settlement. 

“I’m not worried about the Red Hat 
ruling. Software patents are basically a 
bad idea. There might even be an occa¬ 
sional software patent that is a good idea, 
but the pace at which software has been 
patented over the last 15 years and the 
sheer number of patents tells you that 
the implementation of software patents 
is bogus,” he said. 

“There is no excuse for the software 
patents that are out there, and most of 
the patents I have read do not strike me 
in any way as innovative. We have a 
problem and there is no way the open- 
source community can stick its head in 
the sand and pretend it does not exist. 

“The companies that are big support¬ 
ers of the open-source community...I’m 
not sure it’s fair to criticize them for 
making the best of a bad situation. It’s up 
to them to make the best of a bad hand. 
I don’t fault Red Hat for resolving the 
suit. None of us knows what’s in that 
agreement, but I would not be surprised 
if they managed to write the agreement 
with some protections for their down¬ 
stream consumers.” I 
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Telerik offers Metro Ul theme 

Components extend Silverlight for mobile look 


In other component news... 

Infragistics is offering a new Motion 
Framework API, integrated into the 
company's Silverlight and WPF xamDat- 
aChart components. It lets XAML devel¬ 
opers using Silverlight and WPF visually 
animate business intelligence data over 
time. This gives end users richer insight 
into their data. 

Infragistics has also updated its Quince 
Pro design review tool with Design 
Boards, SharePoint Integration, and Pat¬ 
tern Sharing between Libraries, help 
interaction design, visual design and 
development teams focus on the activi¬ 
ties, artifacts and capabilities to stream¬ 
line the understanding of designs. 

National Instruments has updated its 
data acguisition suite to support Visual 
Studio 2010. Measurement Studio 2010 

includes a new Windows Forms .NET 
Intensity Graph which uses color to 
display 3D data on a 2D plot area. With 
this control, user interface developers 
more easily can display pattern data, 
such as RF, power spectrum or terrain 
patterns, and customize the appearance 
using color mapping tools. It also intro¬ 
duces integrated code snippets for user 
interface control classes for Visual C# 
and Visual Basic. 


BY DAVID RUBINSTEIN 

Windows Phone 7 has brought its so- 
called Metro UI theme into the mobile 
device market, and development tool 
company Telerik is set to release RadCon- 
trols for Windows Phone to complement 
Microsoft’s out-of-the-box offerings. 

Among the components available in 
the preview released in late October 
were panel and window controls for 
design and customization; DatePicker 
and TimePicker; and a control for transi¬ 
tions, according to Todd Anglin, chief 
evangelist for Telerik. The controls inte¬ 


grate seamlessly with Windows Phone 
Tools for Visual Studio. 

“With Windows Phone 7, Microsoft 
reimagined what the mobile device inter¬ 
face should look like,” Anglin said. “They 
use hubs, which are areas on the screen 
that are activity-driven. Developers want 
to build apps to replicate that UI. That’s 
where we’re focused.” 

Windows Phone 7 has a number of 
common UI tools, but not all are available 
in the Silverlight toolbox, Anglin added. 
Also, Telerik’s controls are “built with bat¬ 
tery optimization in mind,” he said. I 



TX Text Control 16.0 supports WPF app development 


BY ALYSON BEHR 

Text Control recently released version 
16.0 of its TX Text Control word process¬ 
ing component family that edits, con¬ 
verts, creates and modifies documents. 

TX Text Control’s newest iteration sup¬ 
ports the .NET platform. TX Text Control 
.NET for WPF is a WYSIWYG rich text 
editor for Windows Presentation Founda¬ 
tion. The company said that the new 
release for WPF contains the same fea¬ 
ture set as the company’s current TX Text 
Control .NET for Windows Forms com¬ 
ponent suite. 

Pricing begins at US$549 for the stan¬ 
dard version and runs up to $2,998 for TX 


Text Control .NET Server. 

The new release supports develop¬ 
ment of both native and browser applica¬ 
tions that use WPF. It also supports Office 
Open XML, Word, Rich Text Format, 
HTML and Adobe PDF, and its mail- 
merge is Word-compatible. 

According to the company, version 
16.0 offers a new way to bind the Text 
Control functions to a button bar or other 
third-party ribbon bar. Using Text Con¬ 
trol, developers can build browser-based 
applications that have the same feature set 
as applications built with Windows Forms, 
including loading files from and saving 
files to client machines in any of the sup¬ 


ported formats. 

Text Control said that key added fea¬ 
tures are the repeating table headers that 
simplify the generation of large data tables 
(such as those found in sales reports); a 
new generic spell-checker interface that 
enables third-party spell-check compo¬ 
nent integration; a new text part collec¬ 
tion; and an improved PDF filter. 

According to the company, imported 
text is no longer arbitrarily imported into 
text frames like it was in the previous ver¬ 
sion of TX Text Control. .NET and text 
frames are now used only for complicated 
word-processing features like nested 
tables or formulas. I 
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ercial on '*1 
surface, 

Companies must tread carefully when trying to wring profits 
from products around a community-based project 


BY DAVID RUBINSTEIN 
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O pen-source software has 
been about two things: pas¬ 
sion and need. The passion 
comes from developers’ love of solv¬ 
ing problems, creating new things and 
working with like-minded individuals. 
The need is about adding functionali¬ 
ty to some existing software, or mak¬ 
ing a version of that software that is 
unencumbered (either free as in beer, 
or free as in speech, or both). 

But today, a growing share of the 
open-source universe has been com¬ 
mandeered by large software organi¬ 
zations looking to commercialize an 
open-source project by offering pro¬ 
prietary add-ons, or through support 
and services. These companies—Ora¬ 
cle comes quickly to mind—might be 
seen as interlopers in the open-source 
community, viewing committers and 
contributors as nothing more than 
free (as in no cost) labor. 

So, the question is: Are commer¬ 
cial open-source software and Free 


and Open Source Software at odds 
with each other, or is the relationship 
more symbiotic? 

“I come down on the symbiotic 
side,” said Tim Yeaton, president and 
CEO of Black Duck Software, which 
has software to help developers 
understand open-source code more 
clearly and to deal with license and 
intellectual property issues. 

“[Black Duck] can identify 
300,000 consumable, downloadable 
open-source projects, with 30,000 
new projects begun every year. In the 
grand scheme, it works like it always 
did. Developers still find each other 
on interesting sites that are useful to 
them. Ninety percent [of those proj¬ 
ects] never get a commercial entity 
around them. Analysts suggest that 
more open-source contributors are 
being paid by [commercial] organiza¬ 
tions. It’s not that the group of people 
who do it out of passion is shrinking; 

continued on page 38 ► 
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its just that the former is growing.” 

Many experts agree that “professional 
open source” works best when a company 
comes in and respects the community 
that has grown around the project. “In the 
last decade, big vendors have consistently 
invested in open source for strategic busi¬ 
ness reasons, and they nurture the com¬ 
munity for their interests,” said Paula 
Hunter, executive director of the Outer- 
curve Foundation, an advocacy that facil¬ 
itates the participation of professional 
developers in open-source projects. 

“Look at Eclipse. It was founded and 
funded by IBM with very tight control. 
Then it shifted to a non-profit governance 
model, and IBM loosened its control. 
Now, users and committers are more 
comfortable that the longevity of projects 
would remain intact and meet the needs 
of developers, rather than the commer¬ 
cial interests of IBM.” 

The issue of control over a project is 
a potential flashpoint for trouble, said 
Jim Jagielski, chairman of the open- 
source Apache Software Foundation. “In 
corporate environments, the list of 
requirements and features isn’t derived 
from the need of the masses. It’s derived 
from 'What can we sell?’ At some level, 
companies have to give up control. 

“When [professional] open source 
understands the user community, it’s 
incredibly successful,” he continued. 
“But companies that try to wrest control, 
to fit the project into a pattern of tradi¬ 
tional software development, are the 
ones who have problems.” 

This wrestling for power seems to 
occur when companies backing open- 
source projects become more successful 
and attract venture funding. “That’s 
when there’s a real push for 
them to get more control 
(BL and be the exclusive com- 

* pany behind the code- 

base,” Jagielski said. 
Sam Ramji, vice 



Getting along is one aspect of success 

Projects can survive changes in leadership, sponsorship 

Mik Kersten knows a thing or two about commercial open-source projects. He saw the 
AspectJ project go through leadership and sponsorship changes and remain strong. 

In 1999, he joined the AspectJ project, which started as a commercial effort at 
Xerox PARC funded by the U.S. Defense Advanced Research Projects Agency, to cre¬ 
ate a hosting environment and tools for the community. "We set up an open-source 
hosting portal, with a bug tracker and mailing list—things that are very common 
today," said Kersten, who also began the Mylyn project at Eclipse and has commer¬ 
cialized it at a company called Tasktop. 

With AspectJ, the DARPA funding ended after a couple of years, but the commu¬ 
nity and committers remained. In 2003, the project moved into Eclipse.org as the first 
non-IBM effort on that site, said Kersten. "Adrian Colyer of IBM got interested in it, so 
they funded it for a time." 

Colyer later joined SpringSource (a division of VMware), and the investment behind 
the project moved again. "[Aspect-oriented programming] is still a core technology in 
the Spring stack," Kersten said. "And VMware is now the commercial sponsor." 

AspectJ was so innovative, he said, "that if there was no commercial entity at each 
stage providing the salaries of the committers, it would not have survived." 

Commercial backing of open-source projects helps them grow in a way it otherwise 
wouldn't, said Kersten. "If you want to grow a community, you need a marketing 
effort. Sites like Eclipse and Apache have existing marketing engines, so projects on 
those sites will get more eyeballs." 

But on the other side of that coin, Kersten learned that "open-source communities 
can transcend organizational and commercial boundaries." Often, he said, a commu¬ 
nity feels more affinity toward the project leaders than to the company sponsoring it. 
This can create a mismatch between the organization that acquires the IP rights to 
the project and the leadership of the community, he warned. 

"With AspectJ, we changed leadership when we changed organizations, from a 
Xerox PARC employee to an IBM employee," said Kersten. That, he added, kept every¬ 
thing in sync. I —David Rubinstein 


president of strategy at API manage¬ 
ment software provider Apigee and a 
member of the Outercurve Foundation’s 
board of directors, said that venture cap¬ 
italists look for ways to reduce risk. “If a 
project is deployed, attracting develop¬ 
ers and attracting users, then you know 
there’s a ready-made adoption market,” 
he said. 

The Apache Way 

Personal involvement in a project 
remains crucial to an open-source com¬ 
munity, Jagielski said. Apache bases its 
decisions on who can commit code to a 
project and who can help create a path 
on that person’s investment in the work, 
whether the developer is paid or doing 
work voluntarily. “If they’re just coding 
on their job, Apache sees them as com¬ 
mitters but not invested enough to have 
an impact on direction,” he said. 

“It’s not so much who pays you, but 


do you have a personal interest in the 
code? Are they active on mailing lists? 
Do they speak at conferences? Do they 
update wiki pages? If not, it’s just a pay¬ 
ing job, and the whole drive of what 
open source is about would be gone.” 

Companies who come into Apache to 
commercialize projects know what the 
rules are, Jagielski said. “The [Apache] 
license was written the way it was to 
present a wide range of business oppor¬ 
tunities to use the codebase, and not 
have to release back the 'special sauce’ 
part. We’ve always been incredibly pro¬ 
business. You have to make it easy for 
companies to leverage it.” 

But companies coming into open 
source have a responsibility too, he said. 
“They must be open and honest with the 
community, that they’re still welcomed 
contributors on whatever projects the 
companies are leveraging.” It’s critical 
continued on page 40 ► 
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that companies demonstrate that they 
are not just pulling out developer talent 
while giving nothing back to the commu¬ 
nity, he added. 

The most successful professional 
open-source projects are the ones that 
get life from the community, Black 
Ducks Yeaton pointed out. “Look at 
Drupal and Hadoop. In both cases, the 
community built momentum first. It 
started with a robust, high-growing com¬ 
munity of contributors and users. That 
won’t change because organizations are 
commercializing around it. 

“Cloudera hired the [Hadoop] proj¬ 
ect creator. They’re looking to build val¬ 
ue without violating the community 
model,” Yeaton added. “If you come in 
and violate that, you run the risk of splin¬ 
tering the community.” 

Oracle blind to vision 

Oracle has done just that with its stew¬ 
ardship of Java, MySQL and now Hud¬ 
son as it has run roughshod over existing 
communities. The database and pack¬ 
aged software giant assumed control of 
these open-source communities with its 
purchase of Sun Microsystems. 

“You would think they’d have a better 
understanding of what open source is 
and working with a community,” Jagiels- 
ki said. “With Java and Hudson, it seems 
obvious that the whole idea of open- 
source being a community-led effort is 
something they don’t grasp very well.” 

With Java, MySQL and even Solaris 
(the open-source operating system cre¬ 
ated at Sun), there is “a cultural conflict 
between developers and the commer¬ 
cial entity who wants to profit,” said 
Apigee’s Ramji. 

“Take Solaris. Putting a dot-org on it 
doesn’t mean it’s a non-profit effort. It 
was owned and controlled by Sun, and 
that impacted the development com¬ 
munity heavily. It was clear who con¬ 
trolled Solaris.” 

Because of Oracle’s heavy-handed 
tactics, new open-source projects— 
forks, to be more precise—have sprung 
up around MySQL (the MariaDB proj¬ 
ect, which shares the same codebase) 
and Hudson (as yet unnamed as Oracle 
asserts its rights to the name). 


“Conflicts come when the develop¬ 
er’s ability to change code or dictate it is 
abrogated,” Ramji said. “A code repos¬ 
itory with the companies controlling 
access is a point of conflict. MySQL 
developers who have been work¬ 
ing on that project for a long 
time now have no say in where 
the project is going to go. 

Developers will flee and 
look for other projects.” 

Sara Ford, manager 
of the Ohloh commu¬ 
nity site for Black 
Duck Software, 
learned first-hand 
what it takes to engage open- 
source developers when she was a 
Microsoft manager charged with build¬ 
ing the CodePlex organization. “When I 
first went into the community, at first 
everyone was extremely receptive, if not 
shocked and amazed,” she said. 

“At OSCON 2006, people would 
look at my badge and make comments 
about Microsoft, like 'What are you 
doing here?’ I was there to learn and 
take back knowledge. I said to them, Tf 
you want to help make Microsoft a bet¬ 
ter place for open source, give me infor¬ 
mation to take back.’” 

Changing development 

The adoption of open source was foreign 
to Microsoft, she acknowledged. “It 
involved a change in the development 
process. We’d be going public with 
source very early on, even before we 
would say it’s ready for release.” 

Ramji agreed that open source marks a 
general shift in how software is developed 
in commercial organizations. “The initial 
assumption is that we can use open source 
to get the job done, work collaboratively 
and be geographically distributed. That’s a 
fundamental difference from 10-15 years 
ago, and would have been considered rad¬ 
ically aggressive then.” 

Ford added that “open source was the 
natural progression in making software in 
general better and more supportive.” 

One thing that’s often overlooked 
when commercial entities come into 
open-source projects, or spin them out, is 
when there is not a clear agreement 
regarding intellectual property rights. 


“Where IP rights do not 
address shared owner¬ 
ship [between the compa¬ 
ny and the developer], 
that’s a flashpoint for a large- 
scale conflict,” Ramji said. 
“Software is not a 
brick. It is not inani¬ 
mate. There’s a 
process to updat¬ 
ing software,” he 
continued. “The 
question is, what is the agreement 
that contributions are made under? 
Can developers patent their contri¬ 
butions? What is the correct IP struc¬ 
ture, so the community and corpora¬ 
tions continue to collaborate in a way 
that’s fair and equitable? It’s the gover¬ 
nance process that has made Java so 
sick today.” 

In most open-source projects, there 
are two levels of contributions: the copy¬ 
right itself, which is a snapshot of the 
code; and the terms under which the 
contribution is made, Ramji said. “It’s 
the contribution license layer where 
problems come in,” he said. “You want to 
help people retain control of the projects 
they started.” 

Where commercialization works best 

Developers start these projects because 
they want to create software for people 
to use. These open-source communities 
are not geared up to provide consulting, 
service-level agreements, system inte¬ 
gration and the like. In fact, Apache’s 
Jagielski said the open-source communi¬ 
ty is happy when companies come in to 
provide these added benefits. 

“Any roadblock that would restrict 
adoption is something they’d want to see 
fixed,” he said. Commercial backing of 
open-source projects “has done an 
incredible amount to foster adoption in 
large enterprises.” 

Ramji agreed that open-source soft¬ 
ware has become more mainstream 
through the backing of commercial 
organizations. “You can build the great¬ 
est airplane, but if it uses gas no one can 
source, and parts that only three people 
make, it wouldn’t have a market even if 
you could get from New York to London 
in an hour.” I 
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Android, iOS or Windows Phone 7 

Place your bets 

Survey indicates no clear leader as 
developers search for the platform with the longest reach 


"W" TT nrhich mobile operating sys- 
% /\ / tem will developers place 
T ▼ their bets on in 2011? For 
most it will depend on a particular plat¬ 
form s reach, while for others, its about 
whats “sexy” at the time, experts said. 

In an October “State of the Apps 
Industry Snapshot” survey conducted by 
mobile advertising firm Millennial 
Media, “reach” (or the number of con¬ 
sumers in a platform’s audience) was the 
most important consideration for devel¬ 
opers and publishers choosing a plat¬ 
form, while ease of use took fourth place. 


BY KATIE SERIGNESE 

Twenty-nine percent of the 336 pub¬ 
lisher and developer respondents also 
indicated they will be creating apps for 
the Android operating system this year. 
Windows Phone 7 and the iPad tied for 
second place, grabbing 20% of the 
respondents’ interest. RIM took fourth 
with 12%, while the iPhone trailed in 
fifth with 8% of developer and publisher 
interest. However, according to the sur¬ 
vey, the iPhone reigned supreme in 2010 
with 30% of the respondents developing 
for it. Twenty-three percent indicated 
developing for Android last year. 


“If you asked me a year ago about 
Android, I would say it’s looking up,” 
said Ramon Llamas, senior research 
analyst for mobile devices and technol¬ 
ogy trends at IDC. “Now, it’s a question 
of 'How big is it going to be?’ 

“Last year [Android] was kind of a 
dark horse. We only had a chance to see 
what Motorola was doing, and now we 
have a chance to see what HTC and 
Samsung is doing, and it’s really going 
to take off.” 

The platform’s openness is a great 

continued on page 46 ► 
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The competitors 

Android OS 



Windows Phone 7 OS 



Supported 
Web technology 

Flash and HTML5 


Flash and HTML5 


HTML5 


Silverlight, and "Adobe and 
Microsoft have also announced their 
intent to bring Flash to Windows 
Phone 7," said Ross Rubin, director 
of industry analysis at market 
research firm The NPD Group. Also, 
"In theory, [Silverlight] should be 
able to be implemented by the same 
[operating systems] that support 
Flash/' he added. 


◄ continued from page 43 

thing for developers, but the downside 
is its fragmentation, especially for game 
developers, Llamas added. 

Andy Rubin, vice president of engi¬ 
neering at Google and the chief archi¬ 
tect behind Android, addressed the 
platform’s fragmentation at Decembers 
D: Dive Into Mobile conference in San 
Francisco. Calling it “differentiation” 
instead (because manufacturers and 
carriers can tailor Android devices to 
more or less their liking), Rubin 
acknowledged that Android is some¬ 
what clunky right now. 

“I would characterize Android today 
as an early adopter for tech enthusi¬ 
asts... In the future, I think you’ll see a 
little more attention to detail,” Rubin 
said, as he hinted toward a smoother 
user experience coming down the pike. 

As for this year’s dark horse, it’s Win¬ 
dows Phone 7 for Llamas. At launch, 
Microsoft started with 2,000 applica¬ 
tions in its app store Marketplace, while 
its target was 1,000, he said. Almost a 
month later, Marketplace had 3,000 
applications available, and “that’s pretty 
darn significant,” Llamas added. 

“Microsoft is making overtures to get 
more developers on board,” he said. “It’s 
been working. We just need to see more 
velocity. It hasn’t reached the ‘sexiness’ 
that you see from Android or the iPhone, 
but it’s still very, very early to tell.” 

“There’s no question [Microsoft] 
came to the game late,” said Todd 
Anglin, an evangelist for Telerik, which 
sells GUI components for Windows 
developers. But “where Microsoft his¬ 
torically excels is serving the developer 
community. BlackBerry, Android, 
iPhone...none have a reputation of 
being developer friendly.” 

However, Llamas pointed out RIM’s 
efforts to draw in developers in terms of 
how much money is given back to 
them. But “it’s been over two years now 
[since App World launched], and 
they’re making some of the smaller vol¬ 
ume of apps available. They lack 
momentum in terms of pushing Black- 
Berry apps,” he said. 

The BlackBerry devices are more 
about e-mail and messaging, not run¬ 
ning applications, he added. 


And despite recent reports and num¬ 
bers showing some slip in the iPhone’s 
market share, it is the standard-setter, 
Llamas said. The iPhone is sexy and the 
app market broke open because of it. 
Also, “there is a base out there, and it’s 
not about a desire to have the device. 
It’s outright lust,” he added. 

Aside from a faithful fan base, reach 
also depends on the manufacturer and 
carriers of a given device, which really 
“plays an instrumental role in a plat¬ 
form’s success in the U.S.,” said Ross 
Rubin, director of industry analysis at 
market research firm The NPD Group. 

“Apple’s market share is holding rel¬ 
atively steady, limited by its exclusivity 
to AT&T. Android is growing strongly 
and some of that is on the back of Veri¬ 
zon’s support,” he said, citing its 44% 
U.S. market share in Q3 2010. Addition¬ 


ally, a lot of manufacturers are commit¬ 
ting to Android, such as Motorola, Sam¬ 
sung and Sony, he pointed out. 

But to Telerik’s Anglin, Google has 
done very little to popularize its plat¬ 
form and has relied on its manufactur¬ 
ers to do its marketing. “Google wants 
to be an advertising company in front of 
everyone’s eyeballs,” he said. 

However Android gains its populari¬ 
ty, it comes at the expense of BlackBer¬ 
ry, particularly at Sprint and Verizon, 
Ross Rubin said. And despite BlackBer¬ 
ry doing traditionally well in the con¬ 
sumer market and showing continued 
strength with enterprises, more compa¬ 
nies are starting to attack this space. 
Organizations are starting to allow the 
use of Android handsets and iPhones in 
addition to BlackBerry devices, he 
added. 
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Projected U.S. 
market share in 2011 

Projected worldwide 
market share in 2011 

Number of 
applications 

2011 road map 


36%, according 
to research firm 

IDC 

21% 

in Android 

Market: 

More than 
100,000 

Designed specifically for tablet devices, 

Android 3.0, also known as Honeycomb, is 
due out sometime this year. Andy Rubin, vice 
president of engineering at Google and chief 
architect behind Android, showed a Motorola 
prototype running the operating system at 

D: Dive Into Mobile. 

28% 

17% 

in BlackBerry 

App World: 

15,000 

Research in Motion co-CEO Mike Lazaridis said 

at the D: Dive Into Mobile conference that RIM 
is launching its 7-inch PlayBook tablet comput¬ 
er in the first guarter of 2011. He also said the 
Tablet OS, which supports Flash, will eventually 
make its way to future smartphones with more 
complex, multicore processors. Lazaridis did 
not specify when it will come out, however. 

17% 

(for iPhone) 

13% 

(for iPhone) 

in the App Store: 
More than 
300,000 

Apple could not be reached for comment. 


14% 

(for 6.x and Phone 7) 

9% 

(for 6.x and Phone 7) 

in Marketplace: 
More than 4,000 

Developer payouts for application and game 
sales will be made available the fourth week 
of January. "This payout will include payment 
for all sales of Windows Phone 7 apps and 
games that occurred after the phones became 
available in October 2010 through the end of 
December 2010," blogged Todd Brix, senior 
director for mobile platform services product 
management at Microsoft. An update to the 
Windows Phone 7 OS is planned for 2011. 


Other signs and portents 

Windows Phone 7 is also gaining 
momentum, said Al Hilwa, director of 
applications development software at 
IDC. BlackBerry is the larger mobile 
enterprise platform, he said, but 
Microsoft’s desire to make inroads into 
RIM’s territory is a challenge. 

“[Microsoft and RIM] are the best 
positioned from an enterprise perspec¬ 
tive. I think Microsoft is particularly 
well positioned to leverage its enter¬ 
prise software presence for mobile 
device adoption,” he said. 

NPD’s Rubin agreed, adding, 
“While the pendulum has swung more 
to the consumer side in Window Phone 
7 s initial release, they clearly have good 
exchange and support, and over time 
both [BlackBerry and Windows Phone 
7] will be starring in the enterprise.” 


But the extent to which Windows 
Phone 7 will gain market share will most 
likely depend on the carriers, he said. “It 
will be hard to make much headway at 
AT&T since Apple is a much more 
mature device with very strong brand¬ 
ing, but this is the challenge out of the 
gate for Apple competitors.” 

Additionally, “there are rumors that 
the iPhone may move to Verizon in 2011. 
If that happens, its hard to say what will 
happen. [The iPhone] would most likely 
grab a significant share at the expense of 
Android at Verizon,” NPD’s Rubin said. 

Developer interest in a particular 
platform should also reflect what vendors 
are interested in, said IDC s Llamas. For 
example, Nokia s Symbian operating sys¬ 
tem has a huge install base and is widely 
accepted in Europe and emerging mar¬ 
kets, but Nokia is showing movement 


toward Meego, a Linux-based, open- 
source mobile operating system, he said. 

“Do you want to go with the biggest 
install base now or where Nokia is plac¬ 
ing its bets in the future?” Llamas asked. 

Apples cofounder Steve Wozniak 
already placed his bets in the mobile 
race. In a November interview with a 
Dutch-language newspaper, Wozniak 
divulged that Android will most likely 
become the dominant mobile operating 
system, ahead of iOS and Symbian. He 
also said Nokia was “the brand of the 
previous generation.” 

Analyst firm Gartner also anticipates 
Android’s exponential growth past Sym¬ 
bian. In a September survey, Gartner 
said, Android will become the No. 1 
operating system worldwide by 2014, 
passing Symbian’s years-long hold on 
that distinction. I 
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Agile and ALM: 

Banded together 

Agile ALM promises greater support for SCCM tools 
and an expanded role for testing 



yr 

BY JENNIFER DE JONG 


I t hasn’t exactly advanced on all 
fronts, but ALM is inching its way 
forward, albeit by a circuitous 
route. 

SD Times asked analysts and tool 
makers how application life-cycle man¬ 
agement—the tools and processes 
designed to track software projects 
from conception to deployment to 
retirement—has evolved in the last few 
years and where it is headed. Three 
major themes emerged. 

First, the central promise of ALM 
2.0—better integration between point 


tools for requirements, coding and test¬ 
ing—never really materialized. Second, 
tool makers are overwhelmingly posi¬ 
tioning their offerings as “Agile ALM.” 
Second, the term is so pervasive, it’s dif¬ 
ficult to separate the “agile” arketing 
message from actual support for agile 
practices. What’s more, opinions vary 
on what Agile ALM really means. 
Third, technologies such as application 
security and virtualized testing, among 
others, remain largely outside the ALM 
process today, even though they are 
widely recognized to play important 


roles in how applications are developed 
and managed. 

About that ALM 2.0 

The plug-in ALM frameworks designed 
to let application teams stitch together 
different tool makers’ offerings without 
having to code the connections 
between them did not happen, said 
Forrester principal analyst David West. 
These frameworks were a key promise 
of ALM 2.0, a Forrester Research set of 
principles that outlined ALM’s future 
continued on page 50 ► 
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and gained wide backing from ALM 
tool makers in 2008. 

West noted that Eclipse projects 
such as ALF and Corona, aimed at tool 
and process integration, have failed. 
Unless application delivery teams are 
working in the Microsoft Visual Studio, 
or Eclipse IDEs, “plug-in support is 
limited today,” he said. 

In the ALM 2.0 era, tool makers were 
talking about a standard way to link 
together tools for requirements, coding 
and testing, and everyone appeared 
ready to take the next step, added Chris 
Clarke, vice president of product man¬ 
agement for distributed software devel¬ 
opment solution provider CollabNet. “It 
was a heady day for ALM.” 

But today there is no clear solution to 
tie point products together, added Col¬ 
labNet senior vice president of market¬ 
ing Victoria Griggs. “There is still a lot of 
band aids and bubble gum going on— 
[the process] needs to be more seamless 
than that.” 

One emerging solution is Open Ser¬ 
vices for Lifecycle Collaboration (also 
known as OSLC, or Open Services). 
Proposed by IBM, this community 
effort is designed to help software 
delivery teams more easily use life- 
cycle tools in combination. West said 
OSLC is the only open standard effort 
working on this problem today. 
“Beyond IBM and its partners, adop¬ 
tion is limited,” he said. 

He also noted one ALM 2.0 promise 
that has been realized: widespread sup¬ 
port for multiple software change and 
configuration management (SCCM) 
tools. “Today, all vendors are offering 
integration with multiple SCCM reposi¬ 
tories,” he said. 

What the heck is Agile ALM? 

A few years ago, when agile teams were 
known for tracking progress with sticky 
notes, not software tools, the term 
“Agile ALM” didn’t exist. The words 
contradict each other, said Voke analyst 
Theresa Lanowitz. 

“Agile and ALM cannot exist togeth¬ 
er,” she said, adding that “agile” is con¬ 
cerned only with development prac¬ 
tices, while ALM has a broader reach, 


More on the OSLC 

The OSLC is seeing limited adoption so 
far, but IBM's Rational line of products 
has embraced it. 

The OSLC works mainly by defining a 
set of interchangeable standards to be 
used by products. This goes the same for 
tools that use OSLC standards, and prod¬ 
ucts that are created from those tools. 

Based on this, IBM has implemented 
it in Rational Team Concert, Rational 
ClearQuest and Rational ClearCase. 

One of the latest adopters of the 
OSLC is Mylyn, which uses it to help con¬ 
solidate what Mik Kersten referred to as 
"the rapid growth of our ecosystem" of 
Mylyn. This has so far led to the creation 
of connectors to IBM's Rational tools. I 

from planning to coding, testing, and 
deployment. 

But hers is largely a contrarian view. 
Others see Agile ALM as a natural exten¬ 
sion, a blending of the two ideas. Cliff 
Utstein, vice president of marketing at 
software tool provider AccuRev, 
acknowledged that when a team first 
adopts agile, there isn’t a tremendous 
focus on tools. “But as agile projects scale 
out to dozens of developers and testers 
working at separate locations, ALM tools 
become critical,” he said. 

CollabNet’s Griggs took it a step fur¬ 
ther. “Agile needs ALM to meet its own 
principles. You can’t do [things like] 
continuous integration and incremental 
software delivery on a large scale with¬ 
out tools,” he said. 

Charles Chu, director of product 
management and strategy for IBM 
Rational, said it’s important to step back 
from the hype and hysteria surrounding 
Agile ALM. 

“If you look at what’s really happen¬ 
ing, Agile ALM is the embodiment of 
the set of best practices we have 
learned in 50 to 60 years of application 
development,” he said. “It’s a natural 
evolution—the current thinking about 
how best to manage the life cycle.” 

Impact on agile practices 

As that thinking takes hold, ALM tool 
makers are adding support for agile 
practices including short iterations 
(where the team delivers working soft¬ 


ware every one to three weeks); contin¬ 
uous integration (where team members 
integrate their work at least daily); 
refactoring (making code more effi¬ 
cient without changing its behavior); 
user stories (high-level definition of a 
requirement); and backlogs (list of 
deliverables ranked according to busi¬ 
ness value). 

Tools must not only support these 
practices, but also automatically trigger 
the activities related to the practice. 
For example, a tool should “kick off a 
build every time you check in code,” 
said AccuRev founder and CTO 
Damon Poole. 

Forrester’s West said that while 
ALM tool makers have begun to sup¬ 
port agile practices, the link between 
the tool and the practice is sometimes 
“transient at best.” He did not single 
out specific tools or offer examples. 

Tool support for agile practices 
makes ALM teams more efficient, 
insisted Poole. For instance, with tradi¬ 
tional development efforts, team mem¬ 
bers typically merge their changes to 
code every six weeks. With agile, that 
happens automatically on a daily basis. 
“If you are spending your time reconcil¬ 
ing the merge and the changes, you are 
not going to be successful,” said Poole. 

Kevin Parker, vice president and 
chief evangelist of tool provider Serena 
Software, elaborated on that theme. 
Agile ALM automates ongoing release 
management, he said. Traditional appli¬ 
cation development projects typically 
deliver software every six months, but 
agile efforts are likely to release work¬ 
ing software every two weeks. 

“Instead of building the battleship 
and releasing it in six months, you build 
the most important features first and 
deliver them on an incremental basis,” 
he said, adding that because Agile ALM 
has shortened the development cycle, it 
has forced application teams to come 
up with more efficient ways to define 
requirements—a task they have strug¬ 
gled with for years. In the past, business 
analysts interviewed project stakehold¬ 
ers to find out what they needed the 
software to do. “What you end up with 
is a 400-page document of dreams and 
continued on page 52 ► 
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ambitions,” he said. 

Agile projects require a streamlined 
approach, where only the current space 
(what the software does now) and 
future space (what you want it to do in 
the future) are defined. “That allows 
you to focus on getting from point A to 
point B,” Parker said. “Its faster and 
more scientific.” 

The big questions 

For all the improvements it may offer, 
Agile ALM also raises questions. Chief 
among them is what happens to tradi¬ 
tional lines separating developers and 
testers, said Tieren Zhou, founder and 
CEO of tool provider TechExcel. 

In agile, QA and development are 


essentially one, but in traditional develop¬ 
ment efforts, they are separate, he said. 
‘Where does the QA team fit in Agile 
ALM?” The answer is still unknown, but 
he predicted that companies will take the 
one-team approach, and by next year, 
agile development be fully integrated 
with quality management. 

Zhou said he believes ALM tools 
should reflect the methodology they are 
designed to carry out. “As tools mature, 
the methodology will be completely 
blended with the tool.” He also said that 
agile isn’t the answer for every project; 
waterfall development still has a role. 
“An update to a banking application, 
where the requirements are well under¬ 
stood and clearly specified, is a good fit 
for waterfall,” he said as an example. 


What is clear is that the agile move¬ 
ment has wreaked havoc with tradition¬ 
al role-based ALM, where point prod¬ 
ucts for requirements, coding and 
testing align closely with the business 
analyst, developer and tester roles, said 
Microsoft senior product manager for 
Visual Studio ALM Matt Nunn. 

“The industry is moving away from 
role-based offerings, because the flow 
across the life cycle is more important 
than the individual things you do,” he 
said. 

If agile continues to gain footing in 
ALM, it may not be about agile per se. 
“What really matters is business align¬ 
ment, not agile,” said Voke s Lanowitz. 
She said the word “agile” has caught 
on because it is a good word, but what 
it really means is “customer respon¬ 
siveness.” 

The most important aspect of appli¬ 
cation life-cycle management is “stay¬ 
ing attuned to your line of business,” 
Lanowitz said. HP vice president 
Jonathan Rende echoed that view: 
“These days, the business process rep- 
continued on page 54 ► 
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LEADTOOLS Document 
Imaging SDK vl7.0 

by LEAD Technologies 

LEADTOOLS Document Imaging has every compo¬ 
nent you need to develop powerful image-enabled 
business applications including specialized bi-tonal 
image processing, document clean up, annota¬ 
tions, high-speed scanning, advanced compression 
(CCITT G3/G4, JBIG2, MRC, ABC), and 
Win32/64 binaries for C/C++, .NET, Silverlight, 
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• Multi-threaded OCR/ICR/OMR/MICR/ 
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• Print Capture and Document Writers 
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in the World 
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UltraEdit is the world's standard in text 
editors. Millions use UltraEdit as the 
ideal text/hex/programmers editor 
on any platform — Windows, Linux, 
or Mac! 

Features include syntax highlighting 
for nearly any programming language; 
powerful Find, Replace, Find in Files, 
and Replace in Files; FTP support, sort, 
column mode, hex, macros/scripting, 
large file handling (4+ GB), projects, 
templates, Unicode, and more. 



Named User 
1 -24 Users 
Paradise # 
184 01 201 AO 1 


programmers.com/idm 


VMware vSphere 
Essentials Kit Bundle 

vSphere Essentials provides an all-in-one 
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RAD Studio includes Delphi®, C++Builder®, Delphi 
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applications. Unleash your creativity and bring 
your vision to life with powerful design surfaces 
and innovative collaboration methods for devel¬ 
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'These days , the business process 
represented in software 
applications is the innovation in 
the business itself.' 

—Jonathan Rende, HP 



◄ continued from page 52 

resented in software applications is the 
innovation in the business itself.” 

What about application security? 

Even as ALM continues to evolve, 
some established technologies still 
aren’t part of the life-cycle process. “In 
most organizations, security profession¬ 
als still own security,” said Rende, not¬ 
ing that security testing takes place 
after software is developed and ready to 
be deployed. Penetration testing needs 
to move upstream into QA, and source 
code analysis should take place when 
developers check in code, he said. 

In 2010, HP acquired Fortify Soft¬ 
ware, which makes tools to scan source 
code for security flaws. In 2007, HP 
bought SPI Dynamics. Its penetration 
tools test application security by simu¬ 
lating malicious attacks. 

IBM’s Chu said the company sees 
customers implementing both types of 
testing earlier in the life cycle, but he 
conceded that security has not inte¬ 
grated into most organization’s life 
cycles in a satisfactory way. “There is 
recognition that it is a desirable thing. 
People are moving in that direction,” 
he said. IBM acquired source code 
analysis tool maker Ounce Software in 

2009, and bought penetration tool 
maker Watchfire in 2007. 

Is virtualized testing on the radar? 

Another technology that is yet to gain 
firm footing in the ALM process is vir¬ 
tualized testing, which provides a way 
to test applications without having to 
rely on the operations group to config¬ 
ure physical servers for testing. 

“Virtualization has taken off in data 
centers, but we haven’t seen many organ¬ 
izations using it to test applications as 
part of the ALM process,” said Lanowitz. 
One reason adoption has been slow is 
that, until recently, none of the major 
tool makers were pushing it, she said. 

Now Microsoft is leading that effort, 
she said. The company launched virtu¬ 
alized test offering Lab Management, 
which is part of Visual Studio, in August 

2010 . 

Nunn said that virtualized testing is 
crucial to ALM, and not just because it 


eliminates the cost of maintaining a 
physical test infrastructure. It also 
makes it easier for ALM teams to share 
highly specific information about the 
test environment in which the error 
occurred, he said. That gets around a 
common problem: Testers pinpoint 
errors and report them to developers, 
but developers are often unable to 
replicate the error, he said. 

Asked why virtualized testing has 
been slow to take off, Nunn said, “Oper¬ 
ations need to be more comfortable with 
[providing virtual test environments]. 
There is a time investment in moving 
from one way of doing things to another.” 

Microsoft expects virtualized testing 
to take off in the next couple of years, 
according to Nunn. 

Not happening in ALM 

Also in ALM’s future is product portfo¬ 
lio management (PPM). “ALM efforts 
today typically focus on a single applica¬ 
tion,” said Nunn. A portfolio manage¬ 
ment approach takes all of a company’s 
applications into account, deciding 


which applications to build, which to 
keep and which to retire, he said. 

Organizations have been slow to 
adopt PPM because it’s difficult to “insert 
life-cycle management on an existing set 
of applications,” he said. In addition, 
organizations tend not to plan end-of-life 
for applications, but they should. 

“As apps age, they become expen¬ 
sive to maintain. Documentation is out 
of date and they become difficult to 
look after. And developers who wrote 
them may no longer work for the com¬ 
pany,” said Nunn. 

Another area that may eventually fall 
under ALM’s wing is the customization 
of line-of-business applications, such as 
those offered by SAP. There is no good 
support for that in ALM today, even 
though organizations spend a great deal 
of time in that activity, said Nunn. 

“Will packaged software vendors 
implement life-cycle management in 
their own tools? Or will ALM efforts 
ultimately support these applications?” 
he wondered. “No one is sure which 
way it will go.” I 



The Microsoft Test and Lab Manager component for Visual Studio 2010 streamlines the defect 
tracking and troubleshooting processes of ALM r making it useful for agile teams. 
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C loud? Tablet computing? 
Android? Social media? Scrum? 
Lawsuits? Its hard, really hard, 
to characterize the year that recently 
concluded. 

Looking back at 2010, some of the 
biggest news stories were regarding 
Java—yet it was not the Year of Java. 
The completion of Oracles acquisition 
of Sun Microsystems brought up a lot 
of talk about MySQL and Java, but 
beyond some progress around the 
OpenJDK, not much happened. 


Microsoft, a perennial newsmaker, 
advanced many of its tools and plat¬ 
forms, with significant upgrades offered 
to Visual Studio, Windows, SQL Server 
and SharePoint. While those delighted 
customers, none of those bits represent¬ 
ed a game-changer. Perhaps Windows 
Phone 7 will ring the gong. Perhaps not. 

We could call 2010 the Year of the 
Cloud. Over the past 12 months, many 
development organizations moved 
from studying cloud technology to 
actually using it, though in most cases 


that we’ve seen, cloud projects are still 
in the pilot phase. With fast-evolving 
offerings from Amazon, Google and 
Salesforce.com, and Microsoft’s release 
of Windows Azure and SQL Azure, 
there’s no doubt that 2010 is when the 
cloud changed from vaporware to real¬ 
ity. The impact, though, is marginal. 

Maybe 2010 was the Year of Scrum, 
or at the very least the Year of Agile. 
Certainly there were few conversations 
with industry vendors that didn’t start 
with the word “agile,” as seemingly 





































every product and service was retooled 
(or at least remarketed) to promote 
agility. Of the agile methodologies dis¬ 
cussed, Scrum received the lion’s share 
of the conversation. Yes, 2010 was when 
agile went mainstream. 

Social media? It was all Facebook, 
all the time, except for when you were 
talking about Twitter. Blogs are, like, so 
2009; if Google is the new Microsoft, 
then Facebook is the new Google. 
Whats the impact of all this social 
media hyperbole on the enterprise? 


Hard to assess if it matters. 

Lawsuits? Some years are dominated 
by the courtroom, and 2010 had its share 
of breathless litigation. Oracle vs. SAP, 
Oracle vs. Google, everyone vs. Apple; 
patents and intellectual property are 
huge issues, and due to the complexity 
and confusion around the law, lawsuits 
are here to stay. None of them, however, 
appeared to be a show-stopper. 

Speaking of Google, this may have 
been the Year of the Open-Source 
Mobile Operating System. Android 2.2 


found lots of uptake from carriers, hand¬ 
set makers, software developers and con¬ 
sumers—many of whom chafed under 
Apples tough rules, closed platforms, 
exclusive partnerships and high prices. 
With Android, however, we’re still seeing 
the early stages of its evolution. 

If one must pick a single touchstone, 
let’s call 2010 the Year of the Tablet. Or, 
more specifically, the Year of the iPad, 
since Apple’s offering kicked the stuffing 
out of all the competition. Not only did 
continued on page 61 ► 
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the iPad sell better than industry 
observers predicted, but it sold broadly, 
affecting both consumers and business 
users. In fact, some analysts have revised 
their laptop sales projections downward 
due to the iPads unexpected success. 

Thanks to the iPad (and the iPhone), 
we now have a new category of devel¬ 
oper: app developer, joining those who 
build desktop, server, embedded and 
Web software. Equally important is 
the App Store, a strong new vehicle 
for software distribution in both the 
mobile and cloud markets. 

Next year may not be the Year of 
the iPad. Android competitors are 
coming on strong with their tablet 
platforms, and traditional notebook 
computers are shrinking. But if there 
was a single big change in the year, it 
was that, thanks to the iPad, the 
tablet computer is the first significant 
new computing platform in many years. 

Can’t wait to see what comes next. 


Mergers & Acquisitions 


In the past couple of years, Oracle has 
dominated M&A news. In 2008, it was 
the US$8.5 billion acquisition of BEA 
Systems. In 2009, it was the acquisition 
of Sun Microsystems in a deal valued at 
$5.6 billion. 

In 2010, though, Oracle was some¬ 
what quieter (if you call spending $1 
billion on e-commerce software cre¬ 
ator Art Technology Group quiet), and 
the late M&A bombshell went to 
Attachmate. The company in late 
November announced it was acquiring 
Novell for $2.2 billion. Further, Novell 
said it would sell some of its intellectu¬ 
al property assets to a Microsoft-creat¬ 
ed entity, CPTN Holdings, for $450 
million in cash. 

The year was marked by a steady 
stream of smaller-value deals, as the 
U.S. recession was officially declared at 
an end and companies were looking to 
grow more quickly, according to analysts 
at PricewaterhouseCoopers. It sees 
cloud platforms and services, security, 
and virtualization as leading drivers of 


M&A activity for the early part of 2011. 

As for 2010, IBM and HP both had 
busy years, with HP purchasing smart¬ 
phone maker Palm for $1.2 billion in 
July, then picking up security software 
providers ArcSight ($1.5 billion) and 
Fortify Software (terms were not dis¬ 
closed), as well as data storage provider 
3Par for $2.07 billion after a bidding 
war with Dell. 

Meanwhile, IBM’s acquisition of 
data management 
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company Netezza for 
$1.7 billion was Big Blue’s big 
pickup in 2010, followed closely by its 
purchase of Sterling Commerce for $1.4 
billion. Along with that announcement, 
IBM said it will spend up to $20 billion 
on acquisitions over the next five years. 

Other notable deals in 2010 includ¬ 
ed VMware’s February acquisition of 
software and expertise from EMC’s 
Ionix IT management business for $200 
million in cash. 

In May, productivity application 
provider SAP announced the acquisition 
of venerable database company Sybase 
for $5.8 billion in cash, a move seen by 
some as SAP’s answer to Oracle’s 
growth-through-acquisition strategy. 

— David Rubinstein 


Microsoft 


i 


as the future of computing in his October 
“farewell note” to Microsoft’s employees. 

Visual Studio 2010 rolled out in April 
with new architecture and testing tools 
that broadened its life-cycle capabilities. 
The .NET Framework 4.0 also was 
released at that time, with dynamic lan¬ 
guage support and tighter XAML-based 
integration between Windows Commu¬ 
nication Foundation and Windows 
Workflow Foundation. 

In May, SharePoint 2010 hit the 
streets (along with Office 2010). 
Microsoft spun the wheel on Share- 
Point to include communities, com¬ 
posites and sites as pillars, and added 
many new features for developers to 
create richer, more integrated Share- 
Point applications. Microsoft also 
talked up SharePoint Online more in 
2010 as part of the company’s overall 
services strategy. 

That was underscored in Ozzie’s 
note, in which he described a “post-PC 
world” of cloud-based continuous servic¬ 
es and appliance-like connected devices 
for interacting with those services. And 
at the company’s Professional Develop¬ 
ers Conference in late October, 
Microsoft proved it was “all in” with the 
cloud by providing a detailed road map 
for its Azure cloud operating system, 
database and middleware services. 

— David Rubinstein 


Mobile 




Windows Phone 7. .NET 4.0. Office 365. 
Visual Studio 2010 and SharePoint 2010. 
Oh, and “The Dawn of a New Day.” 

The past year was a busy time for 
developers at Microsoft, which released 
updates to the .NET Framework, its 
development and collaboration tools, 
and its mobile phone platform. Not to 
mention the cloud, which outgoing chief 
software architect Ray Ozzie identified 


If there was any single trend in 2010 
that everyone noticed, everyone had to 
address, it’s the move to mobile. Mobile 
platforms were big in 2009, led prima¬ 
rily by Apple’s iPhone. But in 2010, 
Android finally arrived in earnest, and 
by the end of the year, unit sales of 
Android were hovering at around 13% 
of overall mobile device sales, just 
ahead of Apple’s 12%. 

And yes, that means there are still a 
great many non-smartphones out there. 
And Oracle hopes to address this mar¬ 
ket by refocusing Java ME to target 
clamshell and feature-phone devices. 
That means adding WebKit to Java ME 
continued on page 62 ► 
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so that portions of the browser can be 
stitched into mobile applications on 
tiny flip-phone screens. 

But while Oracle targets the cheaper, 
more prevalent devices, everyone else in 
the developed world can clearly see that 
Android and iPhone are the future of 
mobile devices. Apple started the year by 
infuriating these folks, however, by stipu¬ 
lating that no intermediary compilation 
would be allowed for iPhone applica¬ 
tions. That meant no Flash, no applica¬ 
tion translation tools, and no non- 
XCode-built software could be sold in 
the iPhone marketplace. By the end of 
the year, however, Apple had 
backpedaled on this policy. 

Google, on the other hand, kept its 
anything-goes policies for Android. 

As a result, early in the year some 
Android marketplace items were 
found to be spying on users with¬ 
out their knowledge. While 
Google removed these applica¬ 
tions, it remains a concern in the 
less-regulated Android market. 

After all, even Steve Jobs sug¬ 
gested that if mobile device 
users want to see porn, they 
should get an Android device. 

Perhaps the strangest devel¬ 
opment of 2010 was the relegation of 
former dynamos of mobile to also- 
rans. Even the introduction of a 
revised operating system and a tablet 
PC by RIM late in the year, did not 
change the fact that developers are 
ravenous to learn about iPhone and 
Android development. And Nokia 
spent much of the year flailing wildly, 
seemingly without any plans for its 
multiple phone operating systems and 
development environments. 

— Alex Handy 


neglecting OpenOffice.org. 

On the other side of that coin, the 
company managed to bring new contri¬ 
bution commitments for the OpenJDK 
from Apple and IBM, so the company 
cannot be called weak on open source. 

The Apache Foundation also had a 
busy year, with Hadoop taking most of 
the spotlight. The open-source 
map/reduce implementation was the 
most popular project at Apache in 2010, 
whether measured by code contribu¬ 
tions, sub-projects or discussion lists. 

Hadoop s diverse ecosystem grew in 
conjunction with a growing need for big 
data solutions. Subprojects of Hadoop 
addressed the need to make sense of all 
this big data. The Mahout project con¬ 
tinued to expand its machine-learning 
development tools for use 


s 


Open Source 


i! 


For open-source projects, 2010 was an 
interesting year. While they weren’t the 
most popular open-source projects 
around even when Sun controlled them, 
Oracle made a lot of developers angry 
by dumping OpenSolaris and allegedly 


with Hadoop, and 
the NoSQL Cassandra project intro¬ 
duced the ability to transfer data into 
Hadoop directly from Cassandra. 

Speaking of NoSQL, the hype cycle 
was at its absolute peak for these new¬ 
fangled databases in 2010. While 
NoSQL was the buzzword for developers 
looking to relieve database bottlenecks, 
by the end of the year, the bloom was 
already coming off. Dozens of NoSQL 
choices, coupled with the extreme imma¬ 
turity of nearly all NoSQL projects, 
made these data stores less appealing 
than they were at the earlier in the year. 

For fans of the AMQP standard, 
SpringSource snatched up RabbitMQ, 
giving that open-source AMQP imple¬ 
mentation corporate backing. Google 
purchased Instantiations, and while the 
Instantiations tool chain was not and is 
not open source, Google released Win- 
dowBuilder Pro, WindowTester Pro 
and CodePro Analytix for free. 


Finally, Linux saw another year of 
growth, both on developer desktops and 
on the server. At this point, Microsoft is 
second fiddle in the data center, and the 
Linux community, led primarily by Red 
Hat, has been adding compelling fea¬ 
tures, and reworking older systems. The 
new Completely Fair Scheduler, for 
example, smoothes out the wrinkles that 
made it tough to predict schedule execu¬ 
tion in real-time systems. 

— Alex Handy 




ALM 



The application life-cycle management 
space saw a surge of integration with 
agile methodologies last year. With a lot 
of companies using the term 
■ “agile ALM” to describe their 
ALM suites, getting software 
developed faster, cheaper and with 
more ease was the mantra. 

Trying to quickly hop on the agile 
ALM bandwagon, some companies 
looked to acquisitions. One such 
example is CollabNet’s February 
acquisition of Danube for its Scrum- 
Works Pro project management soft¬ 
ware. However much agile may now 
be a part of the ALM space, though, 
ALM companies reiterated that their 
offerings will still work with any software 
development methodology. 

As the agile methodology seeped its 
way into ALM, the flexibility in dealing 
with always-changing requirements 
became greater. For that, ALM 
providers this year looked for different 
ways of dealing with release and require¬ 
ments management issues. Recognizing 
that stakeholders and customers are now 
more involved with projects than ever 
before, software tool provider Serena 
thinks of release management as a 
process issue, which became the origin 
of its “Orchestrated ALM” vision. 

The new visions solutions include 
change management and version con¬ 
trol, requirements and request manage¬ 
ment, and release control for BPM. 
Although these solutions are not new, 
the real idea of the Orchestrated ALM 
continued on page 64 ► 
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vision is to keep both businesspeople 
and developers on the same page. 

ALM has also showed continued 
movement to the cloud. Although not a 
new phenomenon (IBM started putting 
capabilities from its Rational tool suite 
in the cloud in 2009), SpringSource did 
something interesting last year. Devel¬ 
oped in conjunction with Tasktop, 
SpringSource introduced Code2Cloud 
in October, which Dave West, principal 
analyst at Forrester Research, described 
as the first hosted ALM service with 
everything in one place. 

ALM can still be done in the cloud 
via hosting and built integrations, but 
“this is a one-stop shop where you can 
go and get it all,” West said. 

— Katie Serignese 


Agile Development 


Agile is a common household name as 
the methodology became more deeply 
rooted in software development last 
year than ever before. Virtually all com¬ 
panies used the word to describe their 
products, from testing to requirements 
management and ALM as a whole. 
Aside from tools becoming agile or mak¬ 
ing a software development team more 
agile, organizations seemed to grapple 
this year with how best to implement 
the methodology to ensure success. 

Throughout the year, many experts 
and agile practitioners weighed in on 
the best ways to be agile, but what it 
really came down to is this: There isn’t 
one. It’s really about what works best 
for the organization as a whole. And 
maybe now that agile has been around 
for some time, people are more lax with 
its implementations, but it’s a rare day 
when anyone says they follow Scrum 
or XP by the book. It’s more of an “a 
little of this, a little of that” approach. 

Last year also showed an uptake in 
the integration of lean concepts into 
agile methodologies. Typically used in 
manufacturing, lean concepts, such as 
eliminating waste and single-piece 
workflows, have made their way into 
software development shops. 


Aside from lean’s emphasis on 
reducing waste, it also addresses the 
idea of “What is the value in what I am 
doing?” which is something agile did 
not, some experts said. 

But however much agile or lean an 
organization may use, the implementa¬ 
tion and integration of the two seems 
inevitable. Some have already defined 
this forthcoming combination of agile 
and lean, while others are still searching 
for the right terminology. Perhaps 2011 
will render a clearer idea. 

— Katie Serignese 




Java 
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After almost two years of complete stand¬ 
still, Java is back. Even before Oracle 
announced it would buy Sun Microsys¬ 
tems in 2009, Java was languishing. 

The struggling company couldn’t 
make money on its prized development 
language and environment, and as a 
result, it invested elsewhere. When Ora¬ 
cle inherited the platform in the spring of 
2010, the Java world was beginning a tail- 
spin. The OpenJDK was progressing and 
Java tools continued to evolve, but the 
language itself was standing still. 

And as a result, developers flocked 
to other languages that would run on 
top of their existing Java environments. 
JRuby, Jython and newcomers Clojure 
and Scala all piqued developer inter¬ 
ests, including Twitter, which moved to 
Scala to end the constant downtimes 
that plagued the service. 

But after all the worrying over the 
premature death of Java, Oracle finally 
got its act together in October, when it 
brought IBM back to the JCP table. 
After a few weeks, even Apple 



returned to the JCP and agreed to help 
develop the OpenJDK. 

While all of this was bad news for 
the Apache Harmony Project, it was 
great news for the enterprise Java 
developer. The JCP, it seems, will no 
longer be a dead standards body. As of 
this writing, the JCP has finally created 
JSRs for Java SE 7, and lest we com¬ 
plain of an unclear future, Java SE 8. 

That means Java is back on track to 
evolve and tackle the modem problems 
developers are facing. That’s a far cry 
from two years ago when Java EE users 
were happy just to get REST support. 

Outside of Java itself, the Java 
ecosystem continued its path towards 
lightweight solutions to heavyweight 
problems. Apache Tomcat remained 
the most popular application server, 
and VMware’s SpringSource spent 
much of the year consolidating the 
essential enterprise Java infrastructure 
tools under its banner. 

And tool makers focused heavily on 
making Java easier for everyone in the 
enterprise, from coder to operations 
engineer. Google and SpringSource col¬ 
laborated to bring Roo integrations to 
Google Web Toolkit. Azul finally poured 
its advanced JVM out of its hardware 
solution and into a software solution. 
Terracotta updated Ehcache, a distrib¬ 
uted cache that forgoes Java garbage col¬ 
lection entirely, addressing a problem 
that has plagued low-latency Java sys¬ 
tems for years. 

IDEs also continued to evolve. Per¬ 
haps the most interesting evolution was 
not of any one particular IDE, but rather 
the revelation that Oracle would be 
keeping both its Eclipse-based JDevel- 
oper IDE and NetBeans IDE, meaning 
the company would be maintaining two 
completely different Java IDEs. 

Eclipse, of course, also evolved in 
2010, bringing with it a new focus on 
using the IDE as a runtime environ¬ 
ment. As the experimental E4 proj¬ 
ect drew to a close, it brought new 
ideas for the next stage of Eclipse. 
E4’s successful experiments were 
around the modularization of UI 
components, making RCP devel¬ 
opment easier. I 

— Alex Handy 











Powerful Tools for Developers 



High-Performance PDF Printer Driver 

■ Create accurate PDF documents in a fraction of the time needed 
with other tools 

■ WHQL tested for all Windows 32 and 64-bit platforms 
Produce fully compliant PDF/A documents 

■ Standard PDF features included with a number of unique features 

■ Interface with any .NET or ActiveX programming language 



PDF Editor for .NET, now Webform Enabled 

■ Edit, process and print PDF 1.7 documents programmatically 

■ Fast and lightweight 32 and 64-bit managed code assemblies 
for Windows, WPF and Web applications 

Support for dynamic objects such as edit-fields and sticky-notes 

Save image files directly to PDF, with optional OCR 

Multiple image compression formats such as PNG, JBIG2 and TIFF 
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PDF Integration into Silverlight Applications 

Server-side PDF component based on the robust Amyuni PDF 
Creator ActiveX or .NET components 

■ Client-side C# Silverlight 3 control provided with source-code 

■ Optimization of PDF documents prior to converting them into XAML 

■ Conversion of PDF edit-boxes into Silverlight TextBox objects 

■ Support for other document formats such as TIFF and XPS 


New Touchscreen Tablet 
for Mobile Development! 



The DevTouch Pro is a new color 
touchscreen tablet designed to provide 
mobile application developers with a 
customizable development, testing 
and deployment platform. 


Windows CE 


# 
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Linux 


■ Fully open customizable tablet 

■ Develop with .NET, Java or C++ 

Unrestricted development and 
flexible quantities 

Fully supported in North America 
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Learn more at www.devtouchpro.com 



More Development Tools Available at: 


USA and Canada 
Toll Free: 1866 926 9864 
Support: (514) 868 9227 

Info: sales@amyuni.com 


Europe 

Sales: (+33) 1 30 61 07 97 
Support: (+33)130 61 07 98 

Customizations: management@amyuni.com 
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Keystone for SharePoint 2010 


Discover how Keystone for SharePoint 2010 has transformed many enterprise 
SharePoint 2010 deployments into rock-solid secured fortresses. 

Keystone for SharePoint 2010 closes the gap between SharePoint’s own security 
capabilities and the real-world demands of security-conscious organizations. 
When security is an absolute requirement, the world’s largest organizations turn 
to BiTKOO to achieve defense-in-depth and uncompromising security. 


Key Benefits 

• Authorization decisions based on artifact metadata 

• Information Barriers 

• Segregation of Duties Enforcement 

• Ability to host in the cloud while directories remain behind the firewall 


Transform SharePoint 2010 from 
having rudimentary security into 
an enterprise-grade secure platform! 


• Dynamically assign users permissions based on their attributes in any external system 


• Allow previously unprovisioned users access based on their claims (unanticipated users) 


• Get reports of who has (or had in the past) access to what artifact 


Dramatically increase your SharePoint 2010 security capabilities! 

Visit www.bitkoo.com and download our free guide - “Top SharePoint Security 
Requirements”. Or, call us today at 888-4-BiTKOO or +1 -818-985-4700 to ask any 
questions or to schedule a demo. 





Companies that modernized with 
Simpana® software cut data 
management costs by up to 


CommVault® Simpana® software delivers 
the following capabilities for managing 
Microsoft SharePoint data: 


■ Rapid SharePoint backup including 
"near instant" snapshot capabilities 


Easily browse and restore individual 
SharePoint items, lists and sites 


■ Deduplication of SharePoint 
managed data on both disk 
and tape storage 


■ Simultaneously manage 
SharePoint, Exchange, SQL 
and AD with full support of the 
heterogeneous enterprise 


■ Easy to migrate between SharePoint 
releases with Simpana's Release 
Independence feature 


Learn more at commvault.com 


©1999-2010 CommVault Systems, Inc. All rights reserved. CommVault, the "CV" logo, Solving Forward, and Simpana are trademarks or registered trademarks of CommVault Systems, Inc. 
All other third party brands, products, service names, trademarks, or registered service marks are the property of and used to identify the products or services of their respective owners. 

All specifications are subject to change without notice. 
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AvePoint® 


Unleashing the Power of SharePoint'" 


Complete Backend 
Management for 
SharePoint 


NEW TOOLS: 

• FREE Item-level Restore 
from SQL Backup 

• BLOB Extender for 
storage optimization 

• Connector to view file 
share content directly 
in SharePoint 




Check them out and more 
at www.AvePoint.com. 
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AvePoint’s Got 
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SharePoint Backup and Recovery, Administration, Replication, Compliance, 
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Why SharePoint 
development is 
so damn special! 



BY BJORN FURUKNAP 

M aybe you are an aspiring 
SharePoint developer who 
needs to understand what 
you’re going to face as a SharePoint 
developer. Or perhaps you’re a business 
user, a project manager for example, 
looking to understand where all your 
money goes. Or you may just be here 
for the free t-shirt, in which case you 
will be very disappointed. 

SharePoint development is far from 
normal development. So, exactly what 
makes us SharePoint developers so 
incredibly special? 

First, there’s the skills require¬ 
ment. SharePoint developers need 
to master a range of skills so great, 
it will make quantum mechanics 
seem like Spelling 101. 

Second, traditional development 
methods and experience will only get 
you a fraction of the way. Unit testing, 
for example, is useful only for the first 
few hundred lines of code, after which it 
becomes more of a burden than an asset. 

Third, we are not the only develop¬ 
ers of a solution. In fact, the better a 
solution we make, the more developers 
(whom we don’t know) will develop our 
solutions. 

All in all, we are shooting at a moving 
target while wearing blindfolds, without 
knowing what the target looks like, 
where it is, or what type of ammo we 
need to use. In fact, we don’t even know 
if we’re in the right shooting range. 

Skills requirement 

SharePoint development is completely 
different than other forms of develop¬ 


ment in that it covers such a wide 
range of tiers and technologies. As a 
developer, you need to be proficient in 
the first tier of development, which 
mainly consists of customizing a solu¬ 
tion through the Web interface, or 
out-of-the-box customization, as it is 
often called. 

Then you need to understand the 
extensibility through the middle tier, in 
which you utilize scripting and markup 


languages such as jQuery, JavaScript, 
XML, XSL and so on, usually done 
through tools such as Microsoft’s Share- 
Point Designer. 

Finally, you have the third tier of 
development where the programmers 
reside, and most of your work will be 
done using tools such as Visual Studio 
and Notepad. If the end result is a 
SharePoint solution file, or a .WSP that 
continued on page 70 ► 
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◄ continued from page 69 

needs deployment documentation and 
someone versatile in PowerShell to 
deploy, chances are high that you’re 
doing third-tier development. 

Oh, and don’t think that just because 
you dream in .NET MSIL that you know 
about SharePoint development, because 
even for a die-hard third-tier program¬ 
mer, there are so many technologies you 
need to master. Of course, there are all 
varieties of .NET, but you need to speak 
XML to your family at dinners, and you 
should be fluent in the XML dialects 
that SharePoint uses. Further, there’s a 
need to understand all the levels and 
intricacies of the SharePoint object 


models, both the server object model 
and now the client object model. Securi¬ 
ty, in that loving and compassionate way 
that SharePoint does this completely dif¬ 
ferently from anyone else, is vital if you 
want to make your solutions safe. 

Did I mention Web services, both 
the AS MX type and the WCF type? If 
so, I forgot all the external Web service 
standards and definitions you need to 
understand, and we are still just talking 
about core knowledge that you must 
have before you start understanding any 
business logic in the third-party services 
you want to utilize. 

But wait, there’s more! There is a 
whole range of non-SharePoint tech¬ 


nologies that you need to understand, 
such as Active Directory and a number 
of other authentication mechanisms if 
you plan to utilize external authentica¬ 
tion Exchange if you want to use the 
more advanced features not provided 
by out-of-the-box Web parts SQL Serv¬ 
er if you plan to utilize custom data 
sources for performance... and so on. 

The previous couple of paragraphs 
only detailed the third tier of develop¬ 
ment, by the way. For the middle and 
first tier of development, similar com¬ 
plexities make the developer’s night¬ 
mares even scarier. 

So yes, the skills required for a 
continued on page 73 ► 


Need-to-know technology #1: Client Object Model 

With the SharePoint Foundation 2010 managed client object 
model, you can design client applications that access Share- 
Point content without installing code on the server that runs 
Microsoft SharePoint Foundation 2010. For example, you can 
build new categories of applications that include writing appli¬ 
cations that are based on the Microsoft .NET Framework, rich 
interactive Web parts, Microsoft Silverlight applications, and 
ECMAScript (JavaScript, JScript) applications that run client- 
side in a SharePoint Web part. For example: 

A team leader creates a SharePoint site that has many lists 
that are required to manage her team's mission. She wants to 
change these lists in an ad hoc manner-perhaps updating 
assignments and estimates based on an Open XML spreadsheet, 
or moving items from one SharePoint list to another. She wants 
to write a small custom application to help her manage this. 

A software company that sells a traditional rich client appli¬ 
cation wants to integrate SharePoint document libraries and 
lists into its application, and it wants this integration to be seam¬ 
less or even invisible to its users. 

A SharePoint developer wants to build a rich Web part for a 
SharePoint deployment that brings list content into his custom 
AJAX Web code. He also wants to build an even richer Silverlight 
application that does the same thing. 

What do these people have in common? They can use the 
SharePoint Foundation 2010 managed client object model to 
achieve their goals. The SharePoint Foundation 2010 managed 
client object model lets you write client-side code to work with all 
the common objects in SharePoint sites. Through the object mod¬ 
el, you can add and remove lists; add, update and delete list items; 
change documents in document libraries; create sites; manage 
permissions of items; and add and remove Web parts from a page. 

Previously, there were few options. You could use Web serv¬ 
ices to interact with SharePoint lists and other features, but this 
was challenging. If the Web services did not provide the neces¬ 
sary capabilities, you could write server-side code to provide a 
new Web service (an even more difficult task). Some IT depart¬ 
ments disallow server-side code, or allow only code that is writ¬ 
ten by the IT department, so that sometimes was not an option. 
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The SharePoint Foundation 2010 managed client object model 
enables new kinds of applications and makes it easier to write 
client-side code that interacts with SharePoint content. 

To use the SharePoint Foundation 2010 managed client 
object model (client object model), you write managed code 
based on the .NET Framework that uses an API that resembles 
the object model that is used on a server that is running Share- 
Point Foundation. The client object model has classes for 
accessing site collection information, site information, and list 
and list item information. 

In the case of Web Parts, you use an ECMAScript (JavaScript, 
JScript) programming interface that resembles the .NET Frame¬ 
work API. For Silverlight, you can use a subset of the API that is 
available through the .NET Framework on the client. Although 
much of the information that is presented in this article is rele¬ 
vant to the ECMAScript and Silverlight APIs, this article focuses 
primarily about how to use the SharePoint Foundation 2010 
managed client object model from a client application that is 
based on the .NET Framework. I Source:MSDN 
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SharePoint developer are so wide-rang¬ 
ing that you’ll be spending the rest of 
your life trying to master them all. And 
you can bet there will be more skills 
required for SharePoint 2013. 

Why are traditional methods useless? 

Unit testing and mocking is all the rage 
these days, and for a very good reason. 
When you are the master of the code, 
producing perfect code makes all the 
sense in the world. After all, any code 
error goes directly back to you, and if 
you develop your tests right, your code 
should have no errors. 

However, to a SharePoint developer, 
building code that works is just a small 
part of the puzzle. As I mentioned ear¬ 
lier, we are not the only developers on a 
SharePoint solution. In fact, we should 
encourage our users to modify what we 
make in order to better utilize the 
adaptability that is SharePoint s greatest 
feature. 

This presents the traditional devel¬ 
oper with a nightmare. If you are not in 
control over the environment into 
which you deploy code, how can you 
test whether your code works? You may 
set up a mock environment that match¬ 
es the production environment 100%, 
and within five minutes, some user may 
completely alter the entire solution, 
changing the target you try to hit. 

This is not the worst part, however. 
Even if your code runs perfectly at the 
time you deploy it, it also needs to 
endure the active modification of users 
throughout its entire lifespan. Your 
code may depend on a list having a cer¬ 
tain set of columns, but users may 
change that at any time. They may even 
remove or replace the entire list, and 
how will your code run then? 

The difficulty for a SharePoint 
developer is not just in writing code 
that runs perfectly once, but that runs 
perfectly, no matter what happens to 
the assumptions you’ve made for your 
code. There’s no way you can design 
tests that will properly validate your 
code against every possible change that 
users can make, and traditional testing 
becomes rather pointless. 

There’s a balance between allowing 


users to make those changes and pre¬ 
venting those changes completely. It 
certainly is easier to make sure that 
users cannot make changes that will 
break your solution, but that also means 
that the solution is less flexible. People 
don’t buy SharePoint because they 
want a rigid system that works in a pre¬ 
scribed manner; they buy SharePoint 
because they can adapt it to their ever- 
changing needs. 

Let’s say that you develop a solution 
for managing customer contacts, allow¬ 
ing users to enter and search for cus¬ 
tomers by name, customer number, 
ZIP code and state. You deploy it and 
everyone is happy, and of course, you’ve 
done your unit testing to ensure your 
search function works perfectly. 

However, John, the manager down 
at sales, wants to add more data to your 
customers. He thinks it is good to store 
a customer’s birthdate and religion so 
that he may send the appropriate greet¬ 
ings at those times of the year. In fact, 


he is adamant that these additional 
columns are so important, he makes 
them mandatory for every new cus¬ 
tomer added. 

In this case, John adds new columns 
to satisfy his needs, and your data mod¬ 
el has suddenly changed. Not just that, 
but John also changed the validation 
rules by making the new columns 
mandatory. 

Let’s make this even trickier. John 
realizes that 90% of the company’s busi¬ 
ness will come from international cus¬ 
tomers, and I hate to bring this to you, 
but most of the world has no idea what 
a U.S. state is. Thus, John decides that 
the state column should no longer be 
mandatory, or he may even remove it 
entirely. 

When the developer’s code then tries 
to add a new client, it will fail on several 
levels. It will fail because it tries to add 
the state column for new customers, and 
it will fail because it has no concept of 
continued on page 74 ► 


Linkapalooza: Your SharePointy guide 

It's The Linker here. Perhaps you know me from BZ Media's SharePoint 
Technology Report newsletter. I live for links to save you time spent hunt- 
ing around for valuable information about SharePoint. What a guy, eh? 

I gotta tell ya, it's weird for me to appear in print; usually, I'm in the 
ether, moving in and out like the wind, offering up hyperlinks to all things SharePointy. 
I feel like I should go buy a suit and tie for my coming-out! 

Here are some links to get you started on the path to SharePoint development. If 
you copy and paste them into a browser, all you'll get is a big mess of paste on your 
computer screen, and you'll have to manually type in the URLs anyway. But here they 
are. Hope you're sitting next to a computer while you're reading this! 

■ Setting up the development environment for SharePoint 2010... 

http://tinyurl.com/2v3ag9d 

■ Welcome to the Microsoft SharePoint 2010 SDK... 

http://tinyurl.com/3xot8cb 

■ Microsoft's SharePoint Developer Center... 

http://tinyurl.com/2vjyhd4 

■ SharePoint journeys video contest... 

http://tinyurl.com/33gumtg 

■ Microsoft's SharePoint Designer Developer Center... 

http://tinyurl.com/39n9gfc 

■ BZ Media's SPTechWeb news and resources site... 

http://www.sptechweb.com/ 


Random YouTube entry: Get the party started... 

http://tinyurl.com/yd8u89h 
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Need-to-know technology tt2: Business Connectivity Services 

Microsoft Business Connectivity Services (BCS) (formerly named Business Data Cata¬ 
log) provides read/write access to external data from line-of-business systems, Web 
services, databases, and other external systems within Microsoft SharePoint 2010 and 
Microsoft Office 2010 applications. 

Both SharePoint 2010 and Office 2010 applications have product features that can 
use external data directly, both online and offline. Developers can gain access to a rich 
set of features and rapidly build solutions using familiar tools such as Microsoft Visu¬ 
al Studio 2010 and Microsoft SharePoint Designer 2010. 

A core concept of BCS is the external content type. Used throughout the function¬ 
ality and services offered by BCS, external content types are reusable metadata 
descriptions of connectivity information and data definitions, plus the behaviors you 
want to apply to a certain category of external data. External content types enable 
you to manage and reuse the metadata and behaviors of a business entity from a cen¬ 
tral location, and it enables users to interact with that external data and processes in 
a more meaningful way. 

External content types provide SharePoint behaviors (such as lists, Web parts and 
profile pages), Office-type behaviors (such as Microsoft Outlook Contacts, Tasks, and 
Calendars; Microsoft Word documents; and Microsoft SharePoint Workspace 2010 
lists), and capabilities (such as searching and working offline) to external data and 
services. As a result, users can work in their familiar work environments without 
needing to learn different (and often proprietary) user interfaces. 

For example, consider a business entity such as a Customer. You might want to 
interact with Customer items inside a SharePoint list or work on them offline in 
Microsoft Outlook. Or you might want to enable the user to pick a Customer from a 
list of customers in an Orders contract document inside Microsoft Word. You can cre¬ 
ate an external content type once and then reuse it anywhere you need it. 

BCS enhances Office and SharePoint application capabilities and their user inter¬ 
faces, streamlining development with deep integration of external data and services. 
Experienced users, developers and business-unit IT professionals can integrate assets 
from external systems, and enable interaction with external data through many types 
of Office client and server applications. The BCS feature set enables rapid develop¬ 
ment and deployment of scalable and secure solutions. 

Source: MSDN 


◄ continued from page 73 

John’s new birthdate or religion columns. 
The failure isn’t because the code wasn’t 
properly tested prior to deployment, but 
because the deployment environment 
has changed drastically 

John, being a non-developer sales 
manager, has no concept of the under¬ 
lying problems he may cause, and 
frankly, why should he? He is there to 
solve a business need, not a technical 
requirement. 

We, as SharePoint developers, need 
to handle those challenges, and that 
brings out the million-dollar question: 
How do you write code that runs no 
matter what the environment looks like? 

Those are the challenges we face 
every day. 

But it gets worse. 

Other developers and agility 

Because SharePoint is such a complex 
beast, larger installations often require 
multiple teams of specialized develop¬ 
ers. You may have one team working on 
customizing the user-profile services 
while others may need to handle build¬ 
ing specialized project sites or a Web 
front end that utilizes those modified 
user profiles. 

What you end up with is multiple 
interdependent teams that must ensure 
progress and proper documentation so 
that the other teams may depend on the 
output from each team. So far, this is 
something every developer faces. 

When you then add the moving tar¬ 
get idea I mentioned earlier, you end 
up with what can seem like complete 
chaos. You now have two or more teams 
trying to coordinate firing a gun at a tar¬ 
get nobody knows the location of, with¬ 
out knowing what gun to fire, and, of 
course, without even looking. Even if 
they know what the target looks like (in 
other words, what they are trying to 
accomplish), it is still a massively com¬ 
plex task. 

The solution to all this is thorough 
planning and design up front. If you 
know exactly what you want to build 
before you write your first line of code, 
you also know the exact output and can 
communicate that to other teams. Of 
course, this assumes that the other 


teams do the same. In short, plan 
everything ahead and you won’t be sur¬ 
prised, right? 

Well, that was the way one devel¬ 
oped solutions before agile principles 
taught us otherwise, also known as the 
waterfall era. Now, we are expected to 
deliver the first line of code before the 
ink on the contract is dry. It should be 
in production by the time the contract 
is put in the envelope, and by the time 
the contract is filed in your SharePoint 
document repository, your client should 
be on their way to request the next 
major project. 

Don’t forget: From the time you 
release your first code to the time the 
customer tells you what changes they 
want, everything about your assump¬ 
tions has changed again, because users 
have already started working with and 
relying on your solution. 


So, at this point, because of the won¬ 
ders of agile expectations (which are 
good, don’t get me wrong), we now 
don’t know what our target looks like. 

And then they ask us if we can do 
this any faster... 

Can you cut it? 

Still think you’re cut out to be a Share- 
Point developer? If so, I applaud you 
and wish you the best of luck. I can 
also highly recommend booking a ses¬ 
sion with a psychologist, because you 
are quite possibly stark raving mad. 

Still think you’re paying your devel¬ 
opers too much? Please start from the 
beginning and read this again, 
because you’ve clearly not read what I 
just wrote. Or, in case you are actually 
paying your SharePoint developers 
what they deserve, please let me know 
if you have any openings. I 
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•Image Formats & Compression: Supports 150+ image formats and compressions 
including TIFF, EXIF, PDF, JPEG2000, JBIG2 and CCITT G3/G4. 

•Scanning: TWAIN & WIA (32 & 64-bit), auto-detect optimum driver settings for high 
speed scanning. 
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•OCR/ICR/OMR: Full page or zonal recognition for multithreaded 32 and 64 bit 
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• PDF & PDF/A: Read, write and view searchable PDF with text, images, bookmarks 
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zoom/pan, cine, and LUT manipulation. 
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•Multimedia: Capture, play, stream and convert MPEG, AVI, WMV, MP4, MP3, OGG, ISO, DVD and more. Stream 
from RTSP Servers. 

• DVD: Play, create, convert and burn DVD images. 

• DVR: Pause, rewind and fast-forward live capture and UDP or TCP/IP streams. 

•MPEG Transport Stream: With DVR for UDP and TCP/IP streams & auto-live support. 


Silverlight, 

.NET, WPF, 

WCF, WF, C API, 
C++ Class Lib, 
COM & more! 

Free 60 Day Evaluation! 
www.leadtools.com/sd 
(800) 637-1835 

YLEAD _ 


Document 





MH 

HI! Ill fill 

llll II III 

MflB 

mm 

H 


DICOM Medical 


TECHNOLOGIES 
































































I www.sdtimes.com | January 2011 | SD Times | 


COLUMNS 1 77 


Analyst View 


BY AL HILWA 


Development Bellwethers for 2011 


F our application platform companies which end 
their fiscal quarters in November, one month 
earlier than most, give us a good indication of the 
state of the software economy. 

Adobe: Adobe posted its first billion-dollar 
quarter with 33% growth compared to 2009. This 
is a stunning rebound even recognizing that some 
of this growth represents the swallowing of Omni- 
ture. The growth shows that Creative Suite 5 is 
being much better received than its predecessor, 
and that Adobe has been able to achieve synergies 
with its Omniture acquisition that should remove 
any doubts around its vision for this acquisition. 

Additionally, Adobe won a moral victory when 
Apple blinked and lifted its restrictions on Flash 
applications on the iPhone and iPad (though not 
Flash in the mobile browser). Adobes strategy to 
push through with as many mobile platforms as it 
is allowed to run will make it the de-facto second 
development environment for many developers. 

RIM: How many companies with run-rates of 
US$20 billion post 45% revenue growth? Put RIM 
in this lonely but happy place. RIM has posted 
amazing growth for many quarters; like Apple, 
RIM makes its own phones, and so it is able to 
deliver complete solutions to carriers. Its forte has 
been the depth and breadth of its carrier relation¬ 
ships, and its quarterly numbers show that it has 
extended this success internationally. 

RIM s primary challenge has been its applica¬ 
tion platform technology and development tools. 
In the last year, RIM has begun righting this strat¬ 
egy with acquisitions and innovations, buying a 
strong WebKit-based mobile browser (Torch), 
delivered its first full-screen touch phone with a 
slide-out keyboard (also called Torch), buying an 
operating system company (QNX) and leveraging 
it to design a tablet. 

RIM has also started thinking more aggressive¬ 
ly about developers; its alliance with Adobe to 
make sure that its devices support Flash and can 
see the whole Internet will help it gain applications 
and developers. RIM’s execution and financial 
management position it well, but RIM will need to 
do more to keep its platform competitive with iOS 
and Android. Add Windows Phone 7 to the list of 
challenges because of Microsoft’s strong developer 
ecosystem and enterprise software strength. 


revenue 


Red Hat: Also posting excellent 
growth of about 20% was Red Hat, which lever¬ 
ages open source software to ship well-tested and 
integrated operating system and middleware prod¬ 
ucts to enterprises. Open source software has 
arrived at a point today where it plays a crucial role 
in the IT industry both in the enterprise and as the 
seed technology for many start-ups. 

Notable in Red Hat’s growth is the performance 
of its JRoss middleware portfolio, which it claims is 
becoming a core part of more than half of its top 
deals. JRoss will play a crucial role alongside the 
newly acquired set of cloud capabilities from 
Makara in forging Red Hat’s cloud strategy. 

Oracle: With the Sun acquisition completed a 
year ago, Oracle has become a hardware and soft¬ 
ware giant. While it is hard to tease out organic 
growth from the revenue accretion of the Sun busi¬ 
ness, Oracle’s database and mid¬ 
dleware growth was strong even if 
we make the most generous 
allowances for Sun's weak middle¬ 
ware business. 

Factoring in the healthy 
growth in application software 
and the good reception that Ora¬ 
cle’s integrated software and hardware stack is 
receiving, it becomes clear that Oracle is humming 
on all cylinders. 

Oracle has developed a well-executing engine 
for dealing with thorny human resource and prod¬ 
uct management issues. Oracle built this compe¬ 
tency after the contentious People Soft acquisition 
in 2005, which taught it to focus on long-term cus¬ 
tomer support instead of insisting on upgrading 
them to the latest new code. We are seeing Ora¬ 
cle’s skills with the Sun acquisition in play as it del¬ 
icately balances the Java platform’s need for both 
democracy and aggressive evolution. 

Oracle has scored some early wins by bringing 
IRM over to support its version of open source 
Java and by pushing through the Java 7 roadmap 
through the JCP. Nevertheless, Java must continue 
to be evolved and is facing fragmentation threats 
from Google’s open source Android platform. 

The feel we get from these four bellwethers is 
that all is good in the state of software which gives 
us something to look forward to in 2011. I 
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platform competitive with 
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Integration Watch 


BY ANDREW BINSTOCK 


Java EE: The dead man walking 


W hen I first started writing this column more 
than a decade ago, my attention was focused 
on the teeming segment of enterprise Java technolo¬ 
gies. Two areas in particular were hubs of competi¬ 
tive activity: J2EE servers and JMS providers. Dif¬ 
ferent vendors’ products jockeyed to lead the 
market or become the technological pacesetter. It 
was a great part of the market to cover, and the inno¬ 
vation it produced was fun to report on. 

The market settled down due to two main fac¬ 
tors: BEA’s WebLogic server was faster, better and 
more innovative than competitors. These advan¬ 
tages cemented BEA’s market lead, and the drama 
among commercial offerings steadily evaporated 
from competitors (Sun, Allaire/Macromedia, Silver- 
Stream, Novell, Pramati and others). In the free 
space, JBoss became the de facto implementation. 

During this period, JMS vendors became largely 
irrelevant. The messaging bus was overtaken by 
ESBs, which sort of lost their way when Web servic¬ 
es and (later) REST came to the fore. No longer 
were performance details that distinguished Fiora- 
no from, say, BEA’s built-in messaging layer of much 
interest to most customers. Today, sites generally 
use the JMS implementation that comes with their 
Java server—and it takes care of most needs. 

As the market resolution was working out, SD 
Times’ Java columnist at the time, Allen Holub, fre¬ 
quently pointed out that the resulting solutions 
were, with few exceptions, overkill. He claimed (and 
I believe rightly so) that the vast majority of sites 
using J2EE servers would be better served with an 
instance of Tomcat driving the app and plain old 
JDBC doing the bulk of back-end I/O. 

For most of the past decade, the quest for a lighter 
way to do enterprise Java has been widely discussed, 
but without great enthusiasm. Some progress was 
made, though. The success of Bod Johnson’s Spring 
project was one step in this path. But because Spring 
is an omnibus solution that rides on the entire Java 
EE stack, it does not reduce the complexity so much 
as mask it. The Groovy-based Grails server does the 
same thing to Spring at an even higher level. 

With Java EE 6, we’ve seen a genuine effort to 
reduce complexity. Unfortunately, except for the 
open-source GlassFish project, there are no major 
Java EE 6 implementations! Even WebLogic, a serv¬ 
er whose reputation was built on its early and eager 


adoption of new standards, runs Java EE 5 only. IBM 
WebSphere—always a late adopter of standards—is 
also on version 5. Only JBoss seems to have respond¬ 
ed to GlassFish’s gauntlet; by the time this column 
sees print, the Java EE 6 JBoss AS server should be 
out of beta. 

The lack of enthusiasm for this new generation of 
servers is striking and indicative of a ground-shift in 
enterprise Java, first mentioned by Alex Handy: Java 
EE is no longer the future of enterprise Java. 

Indeed, the proliferation of Java Web frameworks 
suggest that developers are indeed identifying and 
building the functionality they want while letting the 
official version of Java do its own thing. This approach 
was no doubt given a shot in the arm by the success 
of Ruby on Rails, which demonstrated convincingly 
how simple it could be to assemble Web apps from 
small components. 

If enterprise Java is going to 
segue to anywhere, it won’t be 
toward another framework— 
whether Spring, Grails or any of 
the others. Rather, the change will 
be driven by the needs of the 
cloud; that is, the need for small- 
footprint solutions that can be 
replicated in numerous instances and wired together 
to provide the core enterprise services. 

VMware, which views itself as the driver of cloud 
technologies, sees things the same way. It purchased 
SpringSource (the company behind Spring) and has 
been figuring out how to leverage it in the cloud. At 
the moment, though, its focus is on a series of inte¬ 
grated products called vFabric, which includes a 
commercial version of Tomcat, a messaging layer 
from RabbitMQ, the GemFire database, a load bal¬ 
ancer, and Hyperic’s system management product. 

For this approach to truly scale, there must be a 
data fabric that can make data items consistently 
available to all nodes at all times—an equivalent to 
Oracle’s Coherence product. For vFabric, that func¬ 
tionality is provided primarily by GemFire and (to a 
lesser extent) by RabbitMQ. 

As these technologies are mixed and matched to 
scale up apps, this highly distributed way of comput¬ 
ing is likely to replace the monolithic approach of 
Java EE that Sun/Oracle and JBoss have now 
pushed for a decade. I 
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Windows & .NET Watch 


Microsoft's iHeel 

A chilles was dipped in the River Styx by his 
mother Thetis so that he would be invulnera¬ 
ble—in every area except his ankle, where she held 
him. A poison arrow ultimately found the vulnera¬ 
bility and the great, albeit temperamental, warrior 
of the Trojan War was brought low. 

An ankle? One reason to love the Greek myths 
is their narrative drive, which combine film-ready 
heroes and drama and faith and betrayal with the 
profoundly anti-Hollywood ways in which the 
Olympians punish hubris: No movie hero is going 
to be felled by a ligament tear (“The Bourne 

ACL”). 

The iPad, by any reasonable accounting the 
tech marvel of 2010, is the poison arrow seeking 
Microsoft’s heel. It doesn’t matter that there are 
“only” several million iPads in existence, just as the 
number of IBM PCs sold in 1981 was not the issue. 
The issue, now as it was then, is the importance of 
“personal” when it comes to computing devices. 
When people become delighted by a machine, 
they want that delight at work. Corporate policy or 
not, immediate practicality or not—it didn’t matter 
then, it doesn’t matter now. 

I recently heard an IT admin specifically ask 
about supporting new technology “such as iPads.” 
We software developers may complain about the 
rate at which we must learn new technologies, but 
have some pity on the poor IT team, which is 
already facing a lot of pressure about supporting a 
device that didn’t exist a year ago! And the ensuing 
conversation foreshadowed the inevitable out¬ 
come. 

The IT admin made perfectly valid points about 
security, resources and policies. And then someone 
asked how many of those sitting around the table 
had connected their smartphones to the corporate 
network in defiance of those very same issues. It 
may not have been the most polite way to make the 
point, but resistance, as the Borg have taught us, is 
futile. 

So too, inevitably with iPads. People will figure 
out how to connect them to, at least, the corporate 
e-mail server. From there, it’s just a matter of time 
for them to struggle with the challenge of reading 
and editing documents. Here’s where the poison 
enters... 

The iPad may be wonderful for reading and 


BY LARRY O'BRIEN 


writing e-mail, but for document manipulation, 
one wants a keyboard. So if you’re an iPad enthu¬ 
siast, for your next laptop you’ll undoubtedly pre¬ 
fer a MacBook Air or Pro. And once you have your 
“couch and airline-seat solution” in an iPad or 
MacBook Air and your “hotel and working-from- 
home solution” in a MacBook, your weaning from 
Microsoft is almost complete. You’ll undoubtedly 
buy Office for Mac, only to discover that it runs 
poorly in comparison with native Mac alternatives. 
And soon enough you’ll be wearing black turtle¬ 
necks and assembling Antikythera mechanisms out 
of Legos. 

The enthusiasm generated by a truly “personal” 
computer is, of course, how the PC managed to 
shockingly displace the mainframes of the 1970s. 
The new beige boxes were toys compared to the 
powerful mainframes in the climate-controlled 
basement, but people preferred 
to work with WordStar and Lotus 
1-2-3 rather than with the vastly 
more powerful (but frustratingly 
bureaucratic) tools sanctioned 
for use on mainframes. 

“But WordStar and Lotus 1-2- 
3 were productivity tools par 
excellence!” you may cry. “The iPad is the oppo¬ 
site: It is a game-changer for how you spend your 
time on your couch, not at your desk!” 

But the PC was originally about enthusiasm too. 
If you’re old enough to remember TRS-80s and 
Apple ][s and Commodore PETs, I bet you 
remember Hammurabi and Oregon Trail and 
Hunt the Wumpus more than you remember 
dBase I. 

I don’t know if the touchscreen will inspire a 
productivity tool with the lightning-strike power of 
VisiCalc (it’s been 30 years and what, really, has 
come close to it?), but I do know that enthusiasm 
drives sales and software development in a virtuous 
cycle, and, as of right now, the iOS community is 
vastly more enthusiastic than the Windows com¬ 
munity. Microsoft has done an absolutely stellar 
job squandering a seven-year lead in tablet operat¬ 
ing systems, and now there are millions and mil¬ 
lions of arrows flying toward its vulnerable heel. 
Don’t believe me? Then just ask your IT depart¬ 
ment. I 
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Guest View 

BY ANTHONY HAYWOOD 

A bounty on your applications 
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Instead of relying on others to 
inform you of vulnerabilities , 
you must regularly inspect 
your defenses. 


I n the last year, there have been a number of 
organizations offering rewards, or “bounty” pro¬ 
grams, for discovering bugs in applications. Mozilla 
currently offers up to US$3,000 for crucial bug 
identification. Google pays out $1,337 for flaws in 
its software. Deutsche Post is sifting through appli¬ 
cations from “ethical” hackers to approve teams 
who will go head-to-head and compete for its Secu¬ 
rity Cup in October. The winning team can hold 
aloft the trophy if they find vulnerabilities in its new 
online secure messaging service—that’s comforting 
to current users. Are these incentives the best way 
to make sure your applications are secure? 

No. These sorts of schemes are nothing short of 
a publicity stunt and, in fact, can be potentially 
dangerous to an end user’s security. 

Inviting hackers to trawl over an application prior 
to its launch simply grants them more time to iden¬ 
tify its weaknesses, which they 
may decide are more valuable 
kept to themselves. Once the big 
announcement is made detailing 
who has purchased the applica¬ 
tion, and the time the product is to 
go live, the hacker can use this to 
breach the system and steal the corporate jewels. 

A further worry is that while on the surface it may 
seem that these companies are being open and hon¬ 
est, if a serious security flaw were identified, would 
the developers raise the alarm? I believe they’d fix it 
quietly, release a patch and hope no one hears about 
it. The hacker would claim the reward, promise a 
vow of silence, and then sell the details on the black 
market, leaving any user with a hole in their defens¬ 
es, waiting to be exploited while the patch is being 
developed, if the patch even succeeds at all. 

Sometimes it’s not even a flaw in the software that 
can cause problems. If an attack is launched against 
the application, causing it to fail and reboot, then this 
denial of service can be just as costly to your organi¬ 
zation as if the application were breached. 

A final word of warning is that, even if the appli¬ 
cation isn’t hacked today, it doesn’t mean that tomor¬ 
row they’re not going to be able to breach it. Win¬ 
dows Vista is one such example. Microsoft originally 
hailed it as its most secure operating system it’d ever 
made, and we all know what happened next. 

IT is never infallible; that’s why penetration test¬ 


ing is often heralded as the hero of the hour. Howev¬ 
er, penetration testing has moved on and, while still 
valid in certain circumstances, historical penetration 
testing techniques are limited in their effectiveness. 

Let me explain: A traditional test is executed from 
outside the network perimeter with the tester seek¬ 
ing applications to attack. However, as these assaults 
are all from a single IP address, intelligent security 
software will recognize this. Within the first few 
attempts, the address is blacklisted or firewalled, and 
all subsequent traffic is treated as malicious. 

There isn’t one single piece of advice that is the 
answer to all your prayers. Instead, you need appli¬ 
cation testing combined with intrusion detection, 
both working in harmony to achieve a secure system. 

The reason I advocate application testing is, if you 
have a public-facing application that’s been compro¬ 
mised, the financial impact to the organization could 
be fatal. There are technologies available that can 
test your device or application with a barrage of mil¬ 
lions upon millions of iterations, using different bro¬ 
ken or mutated protocols and techniques in an effort 
to crash the system. If a hacker were to cause it to fall 
over or reboot, this denial of service could be at best 
embarrassing and at worst detrimental. 

Intrusion detection, capable of spotting zero-day 
exploits, must be deployed to audit and test the 
recognition and response capabilities of your corpo¬ 
rate security. It will substantiate that not only is the 
network security deployed and configured correctly, 
but also that it’s capable of protecting the application 
that you’re about to make live or have already 
launched, irrespective of what the service it supports 
is (be it e-mail, a Web service, etc.). 

The device examines behavior to determine if an 
incoming request is likely to be either valid or mali¬ 
cious. This provides not only reassurance but also 
all-important proof that the network’s security is 
capable of identifying and mitigating the latest 
threats and security-evasion techniques. 

While we wait to see who will lift Deutsche Post’s 
Security Cup, we mustn’t lose sight of our own chal¬ 
lenges. My advice would be that, instead of waiting 
for the outcome and relying on others to keep you 
informed of vulnerabilities in your applications, you 
must regularly inspect your defenses to make sure 
they’re standing strong with no chinks. If you don’t, 
the bounty may as well be on your head. I 
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BY DAVID RUBINSTEIN 


Firming up the cloud 


David Rubinstein is 
editor-in-chief of SD Times. 


A backlash is coming against 
Salesforce.com CEO 
Marc Benioff's handcuffs, 
said Apprenda CEO Schuller 


A s usual, the hype has gotten way ahead of the 
reality. This time, I’m talking about cloud 
computing. 

“Pure play” cloud companies point to what they 
call the growing number of large enterprises that 
either are experimenting with cloud computing, or 
have already moved a pilot project here or there 
onto the cloud. And certainly, more software, plat¬ 
form and infrastructure suppliers are moving their 
offerings into a cloud-ready, subscription-based 
solution that they believe will be poised to reap the 
benefits of this shifting development and deploy¬ 
ment model. 

Yet there are still the same 
problems that stifled the adop¬ 
tion of the Application Service 
Provider model a decade ago: 
security, dependencies and 
control. On top of that, add 
multi-tenancy, scalability, man¬ 
agement, governance and provi¬ 
sioning of customers, and you can see why the ear¬ 
liest cloud movers are investing in private clouds. 
(This, to me, seems a misnomer anyway. It should 
be called “efficient computing,” as most definitions 
I’ve heard of private clouds talk about optimizing 
utilization of servers to reduce both their number 
and the costs of IT—which you still own and pay 
for, by the way.) 

In fact, Sinclair Schuller, CEO of SaaSGrid 
maker Apprenda, sees the cloud bubble starting to 
deflate in 2011. “The level of education around the 
cloud has increased so much in the past 12 months 


that cloud vendors will be called out for what they 
do and do not provide,” he said. “The hype cycle is 
broken, and we’ll see a backing off of throwing the 
term ‘cloud’ around.” 

Right now, there are three aspects to the cloud: 
software-as-a-service, platform-as-a-service, and 
infrastructure-as-a-service. The first is way ahead of 
the others at this point, although productivity soft¬ 
ware beyond CRM is only now appearing. 

“The first cloud applications are 10-year-old 
designs. They’re not composite, they’re not using 
business process flows or ESRs,” said Paul Freman¬ 
tle, cofounder of SOA middleware provider WS02. 
“The first steps in the cloud are things that have been 
easy to contain by using a PHP or Ruby runtime, or 
Tomcat. That will have to change significantly in the 
next couple of years.” 

Several platforms have already been developed, 
such as Amazon EC2, Google and Salesforce.com, 
but those are proprietary. Apprenda’s Schuller sees 
a revolt against vendor lock-in in 2011, a “backlash 
to Renioff’s handcuffs,” he called it, referring to 
Salesforce CEO Marc Renioff. 

Perhaps the greatest amount of work needs to 
be done in the infrastructure area. Compliance, for 
example, is tougher in the cloud, when the servic¬ 
es you need to monitor are not your own. 

It’s critical that the cloud evolve in the right way. 
For that to happen, cloud providers are going to 
have to invest in the plumbing and tools. Trying to 
move existing platforms to cloud by opening up 
some APIs doesn’t take into consideration how 
people want to use software in the cloud. I 
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